Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

I built a free UK personal finance app as a single HTML file. Here's why, and how.

I'm not a developer. A few months ago I couldn't write a line of code. I'm a British backpacker living in Australia, and about the only thing I knew about software was that I'd been frustrated by it for years. Here's the thing — I'm a s…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

I'm not a developer.



A few months ago I couldn't write a line of code. I'm a British backpacker living in Australia, and about the only thing I knew about software was that I'd been frustrated by it for years.

Here's the thing — I'm a self-diagnosed personal finance geek. Spend a day with me and I guarantee I'll bring it up more times than you'd like. And yet every tool I tried to manage my money either wanted my bank login, a monthly subscription, or was built entirely around American tax law with a thin coat of paint slapped over it for UK users.



So I'd been limping along with spreadsheets. They did the job, I guess. But they never scratched the itch. I could never work out an efficient system to log my spending, so it turned into a two hour job at the end of every month. And they were completely useless for anything forward-looking — working out my CGT position, modelling what happens if I overpay my mortgage, figuring out when I could realistically stop working.



Then AI got loud enough that I couldn't ignore it anymore. I read enough to understand that the barrier between "having an idea" and "building a thing" had basically collapsed. So I set myself a challenge: what would I actually build if I could build anything?

The answer was obvious. Build the finance app I'd always wanted.



What I actually built



It's called Vault. It's a single HTML file. You open it in a browser and it works. No account. No server. No subscription. Everything you put into it lives in your browser's localStorage — which means I have zero access to any of it. Not a privacy policy promise. Structurally impossible.



It's built specifically for UK users. That meant getting the stuff right that most apps completely ignore:




  • Net worth tracking with debts properly deducted, multi-currency with live FX

  • Spending tracker with budget limits per category, recurring transactions, and spending insights

  • Salary calculator covering Scottish vs England/Wales/NI tax bands, pension salary sacrifice, and student loan repayments

  • Capital gains tax tracking using HMRC-compliant weighted average cost, with ISA holdings automatically excluded

  • Stamp duty calculator with the correct post-April 2025 thresholds for first-time, second home, and additional property buyers

  • A scenario planner covering rent vs buy, FIRE timeline, mortgage overpayment, and debt payoff

  • A FIRE calculator with four growth profiles

  • Investment (LSE) and crypto portfolio tracking



I built all of this in natural language. Genuinely. I described what I wanted, argued about the details, pushed back when something felt wrong, and iterated. Claude Code did the actual writing. Within about ten minutes of starting I had a working dark-themed web app with three sections. Claude Code had built me an entire useable website in less time than it takes to boil a pot of pasta.

I was, and still am, genuinely gobsmacked.



Why it's free and why it stays on your device



The privacy thing isn't a marketing angle. It came first.

Every app I looked at that offered the features I wanted either charged a subscription, connected to your bank and monetised that data, or both. The apps that were free were free because you were the product. Snoop makes money from bill-switching referrals using your spending data. Emma makes money from premium tiers and financial product recommendations. That's fine — they're businesses. But it means the tool is never fully on your side.



Vault has no server to send your data to. That's not a feature I added — it's just what a single HTML file is. Your financial life stays on your device. If I shut the project down tomorrow, your data doesn't disappear. You can take the file and run it locally forever.

It's free because I built it for myself first. If other people find it useful, that's the point. I'm not trying to build a business right now. I'm a backpacker who taught himself to vibe code and built the thing he wanted to exist.



Where it's at



It's live. It works. It has a first-time onboarding tour so it's not completely confusing to open cold.



It's also v1. There are things missing. There are probably bugs I haven't found yet. The data lives in localStorage which means if you clear your browser it's gone — export regularly once I build that properly.



I'm still building. I don't know exactly where it goes. But I'm sharing it now because the only way to find out if it's useful to anyone else is to let people use it.



If you try it — tell me what's broken, what's missing, what doesn't make sense. That feedback is the whole point right now.





Vault is built for UK users. It handles CGT, ISA tracking, UK salary calculations, and stamp duty with correct 2025/26 rates. Everything runs in your browser. No





thing leaves your device.



Written with AI assistance. Every word is based on my own experience building Vault.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification
1 Warnungen
title: Detect Exploitation - I built a free UK personal finance app as a single HTML file. Here's why, and how.
id: f1656f68-9ace-4107-990b-f33c97d5aea0
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-27
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-27"
        description = "YARA Signature for "
    strings:
        $str = "I built a free UK personal fin" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("I built a free UK personal finance app a")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*I built a free UK personal finance app a*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "I built a free UK personal finance app a"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Analyse für identifizierte Bedrohung auf Basis von Live-CTI (ENISA EUVD): CVSS 0.0 · EPSS 0.0% · CISA KEV: nein. Handlungsableitung aus den verlinkten Hersteller-Quellen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I built a free UK personal finance app as a single HTML file. Here's why, and how.

Thematisch verwandte Begriffe: built, free, personal, finance · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

💬 Kommentare werden geladen…
Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-100739 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag