Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
YouTube Security VideosGoogle Cloud Tech: Gemini is coming to your city(24.09.2026 um 15:00 Uhr)
AI & KI NachrichtenGoogle’s latest moonshot to put machine learning in space(24.09.2026 um 15:12 Uhr)
Windows Tipps & SecurityPoll: What's your favorite Surface of 2026?(24.09.2026 um 14:58 Uhr)
Sichere ProgrammierungStreaming Materialized Views for Live Read Models (2026)(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA Day Is Not 86400 Seconds: The DST Bug in Your Date Math(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungSetting up Traefik: reverse proxy with automatic HTTPS(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA 200 OK response does not prove a secret leak(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungHow hot do you like it?(24.09.2026 um 15:05 Uhr)
YouTube Security VideosGoogle Cloud Tech: Gemini is coming to your city(24.09.2026 um 15:00 Uhr)
AI & KI NachrichtenGoogle’s latest moonshot to put machine learning in space(24.09.2026 um 15:12 Uhr)
Windows Tipps & SecurityPoll: What's your favorite Surface of 2026?(24.09.2026 um 14:58 Uhr)
Sichere ProgrammierungStreaming Materialized Views for Live Read Models (2026)(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA Day Is Not 86400 Seconds: The DST Bug in Your Date Math(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungSetting up Traefik: reverse proxy with automatic HTTPS(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA 200 OK response does not prove a secret leak(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungHow hot do you like it?(24.09.2026 um 15:05 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

I built a 325K-line enterprise platform in 11 months (solo). Here's how AI changed what's possible.

I'm Travis, a staff engineer with ~20 years building software. Eleven months ago I started building Flywheel — an AI workflow automation platform. Solo. Evenings and weekends. Today the codebase is 325,000 lines of production code. 702 c…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

I'm Travis, a staff engineer with ~20 years building software. Eleven months ago I started building Flywheel — an AI workflow automation platform. Solo. Evenings and weekends.



Today the codebase is 325,000 lines of production code. 702 commits. Three services (Go backend, Next.js frontend, Python AI agent), 14 integrations, full CI/CD, Terraform infrastructure. Enterprise-grade auth, billing, monitoring — the works.



I didn't mass-generate code. I didn't skip tests. I wrote a real system that I'm shipping to real users. Here's how.






The Stats



Let's get specific. These are real numbers, not estimates.



Codebase:




  • 170K lines of Go (backend API, 14 provider integrations, distributed pipeline execution)

  • 145K lines of TypeScript (visual workflow editor, React Flow canvas, 60+ component directories)

  • 7.5K lines of Python (AI agent — FastAPI, Anthropic SDK, MCP tools)

  • 2,500 lines of Terraform (GCP infrastructure as code)

  • 847 test files across the stack



Git churn:




  • 1.37 million lines inserted

  • 716K lines deleted

  • Only 325K survived

  • For every line of code in the app, I wrote more than two



Claude Code usage (all time):




  • 2,900 sessions across 144 active days (longest streak: 42 days straight)

  • 94.7 million tokens generated — plus billions more served from prompt cache

  • ~$1,200 in Claude Max subscription — usage that would've metered at $2,500+ on API pricing






What I Actually Built



Flywheel automates recurring tasks. Not one-off AI magic — persistent workers that run on schedule, via webhook, or triggered by events.



The core insight: AI is great at reading messy data (emails, PDFs, Slack). Deterministic logic is great at routing, filtering, delivering. Combine them and you get workflows that handle jobs reliably.



What the platform does today:




  • Visual drag-and-drop workflow builder on a React Flow canvas

  • 10 data providers: Gmail, BigQuery, PostgreSQL, S3, DynamoDB, Firestore, GCS, Google Drive, Pub/Sub, Domo

  • AI enrichment nodes: Claude and ChatGPT run mid-pipeline, reading data and producing structured output

  • 8 processing transforms: filter, route, join, collect, flatten, split, apply template

  • Human-in-the-loop: workflows pause for human review before continuing

  • Distributed execution with chunked streaming, per-node error policies, failure retry

  • Multi-org RBAC with entity-level permissions

  • Stripe billing, monitoring dashboard, template marketplace



The workflow canvas isn't just where you build. It's where you run your operation. That's the 1.0 vision — you open the canvas and see live stats, reports, and action queues from your running workflows, not just the pipeline graph.






Why the Fundamentals Post Matters More Now



Six months ago I wrote about how strong fundamentals + AI multiplied my output. That post had 4,366 tests, and the core thesis was: AI multiplies whatever you already have. Clean codebase → clean AI output. Messy codebase → garbage.



That thesis has only gotten more true at scale. Here's what changed:



Then (September 2025): 4,366 tests. Felt like a lot.

Now (June 2026): 8,000+ tests. 847 test files. 372 API endpoints.



Then: "Claude can generate endpoints that follow your patterns."

Now: Claude reads CLAUDE.md files for context, follows registry patterns to add new providers, writes tests that match conventions, and refactors entire domains in a single session.



The fundamentals didn't just help me write code faster. They made it possible for AI to work on the codebase without me present.






The Workflow That Scales



My process hasn't changed much. It's just faster.



1. Claude sketches, I refine.



I let Claude take the first pass at a design. Then I highlight the parts that don't feel right and we iterate — back and forth, tightening the plan. Before implementation, I have Claude challenge its own plan to surface gaps I'm not thinking of. Once I'm satisfied, I let it ride.



2. Screenshots are worth a thousand tokens.



I remapped macOS screenshot hotkeys to save directly into a /screenshots folder in my repo (gitignored). When I'm working with Claude Code, I drop a screenshot into the conversation and we're immediately on the same page — no describing layout issues, no explaining what "that button on the right" means. A picture is worth a thousand words, and it turns out it's worth even more when your pair programmer is an AI.



3. Tests after manual verification.



I test manually first to iterate fast. Once I'm happy, Claude writes the tests to lock it in. Then /check --run-all runs the full suite before anything gets committed.



4. Continuous refactoring.



Every feature that touches existing code is a refactoring opportunity. Small improvements. Better names. Clearer abstractions. This is what keeps the codebase AI-friendly at scale. Stop refactoring and the code rots — then AI suggestions start degrading too.






Where This Is Going (and Why I'm Sharing)



The goal isn't just "solo dev ships product." It's something I find more interesting: using Flywheel to help run Flywheel.



I'm building workflows that take a first pass at the day-to-day, with me in the loop to review:




  • Support — reading incoming tickets, routing them, and drafting replies to the common ones for me to approve

  • Bug triage — spotting an edge case, reproducing it with a test, and opening a PR I can check before it merges

  • Marketing — scheduling content, tracking engagement, and helping with cross-posting



A workflow platform only really earns trust if its own author leans on it, so I'm trying to live on it. The idea is to let Flywheel carry the repetitive load so my time goes to the harder problems. It's early — plenty doesn't work yet — but that's part of why I'm building it in the open.



After 11 months of solo building, the foundation feels like it's there.






The Visual Journey



If you want to see how far the UI has come — the earliest version was a dark, flat, brutalist thing. Basic black backgrounds, no design system, functional but ugly. Today it's a polished visual workflow canvas with glass morphism, gradient provider icons, a two-level canvas architecture, and a real design system. Same codebase. Same one developer.






Key Takeaways





  1. AI multiplies your codebase quality, not just your speed. A clean, well-structured codebase gets better AI output than a messy one at any size.


  2. ~$1,200 of Claude Max is not "cheating." That's roughly $110 a month for usage that would meter at $2,500+ on API pricing. It's a new kind of labor — you still design, review, test, and ship. The tokens do the typing.


  3. Fundamentals compound. IaC, event-driven architecture, service layer patterns, CLAUDE.md context files — every investment in structure pays dividends as the codebase grows.


  4. Fresh context > long context. Even with 1M context windows, focused sessions produce better output than marathon ones.


  5. The solo dev ceiling just moved. Production code with tests, CI/CD, infra, and 14 integrations. One person. Eleven months. That wasn't possible two years ago.






What's Next



Flywheel 1.0 ships soon. Widgets turn the workflow canvas into a live operational dashboard — stats, reports, action queues alongside your pipeline cards. Then we start dogfooding hard: Flywheel workflows running Flywheel's support, development, and marketing.



If you're interested in the platform or the AI-assisted development approach: flywheeletl.io. Want to see what a real workflow looks like? The AI Marketing Worker for X is three pipelines that find reply opportunities, draft responses for human approval, and track follower growth on a live dashboard — the same worker I use to run Flywheel's own marketing. (I also built a Slack Court that puts petty team grievances on trial in a dedicated courtroom channel, complete with an AI judge — because dogfooding should be fun too.)






Has the ceiling for what one person can build actually changed? Or am I just in the honeymoon phase? Curious what others are seeing.

CTI Threat Relationship Graph3 Knoten / 2 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Vulnerability Remediation & Verification
title: Detect Exploitation - I built a 325K-line enterprise platform in 11 months (solo). Here's how AI changed what's possible.
id: 256e780d-69aa-494d-bd06-44259a69ea5c
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "I built a 325K-line enterprise" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich I built a 325K-line enterprise platform .... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I built a 325K-line enterprise platform in 11 months (solo). Here's how AI changed what's possible.

Thematisch verwandte Begriffe: built, 325Kline, enterprise, platform · 6 Treffer

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97179 | A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. T…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick