PHP2Shell and the 5-Hour Window to Patch a 9.2 CVE

Is legacy code a liability, or just software that “succeeded long enough to get old”? In the debut of “Aaron Loves On...,” a new point-counterpoint format on SaaS That App, Aaron Marchbanks makes the case for old, stable code that keeps doing its job. His examples are a motor test system built in the 1970s and a COBOL inventory and fulfillment system that a profitable e-commerce business relied on for more than 20 years. Justin Edwards pushes back on sacred cow code nobody will touch, close-your-eyes deployments, and letting Amazon or Apple decide when you modernize. This podcast is brought to you by Delta Systems, your one-stop shop for front-end, back-end, and full-stack software development. At Delta, Justin and Aaron share the same philosophy when it comes to clients: they treat people like colleagues, not just customers. Maybe that’s why Delta typically spends years working with the same companies: how many software engineering firms can you say that about? So, if you’ve got a big SaaS project in mind but have no idea where to start, come and get a free scope and estimate from Delta Systems at: https://deltasystems.com/?utm_source=podcast&utm_medium=show-notes&utm_campaign=saas-that-app-building-b2b-web-applications-show Got a burning idea for an episode, or a SaaS question you absolutely must know the answer to? Leave us a voice memo: https://www.speakpipe.com/SaasThatApp

AI agents are starting to show up where people already spend their time: their text messages. Served co-founder Dmitri Love explains why the next big consumer app might not be an app at all. Dmitri joins Aaron Marchbanks and Justin Edwards on the latest episode of SaaS That App to share how Served, an AI kitchen assistant, plans meals, finds recipes, and builds grocery carts, all over text. He explains why Served chose messaging over the App Store and why he believes a handful of major AI platforms may become the main way people use software. They also explore how AI agents that make purchases can earn user trust, including keeping a human in the loop for high-impact actions, why AI super agents struggle when they try to do too much, and how to tell whether a product really needs AI. Dmitri also shares what it was like pitching on Shark Tank at 22, how building Walmart’s Sparky validated the idea behind Served, and what he learned from a fintech startup launched at the wrong time. This podcast is brought to you by Delta Systems, your one-stop shop for front-end, back-end, and full-stack software development. At Delta, Justin and Aaron share the same philosophy when it comes to clients: they treat people like colleagues, not just customers. Maybe that’s why Delta typically spends years working with the same companies: how many software engineering firms can you say that about? So, if you’ve got a big SaaS project in mind but have no idea where to start, come and get a free scope and estimate from Delta Systems at: https://deltasystems.com/?utm_source=podcast&utm_medium=show-notes&utm_campaign=saas-that-app-building-b2b-web-applications-show Got a burning idea for an episode, or a SaaS question you absolutely must know the answer to? Leave us a voice memo: https://www.speakpipe.com/SaasThatApp

PHP runs a huge share of the web. So when two 9.2-rated remote code execution vulnerabilities, dubbed PHP2Shell, were disclosed in PHP core, the clock started immediately. Exploit attempts climbed from tens of thousands in the first hour to millions within a few hours. Byron DeLaMatre, Director of Operations & Senior Full-Stack Developer at Delta Systems, led the response. In this episode of SaaS That App, he joins Aaron Marchbanks to share what that response looked like: prepping the night before, patching everything else ahead of the drop, and feeding the CVE into Claude to generate infrastructure-as-code mitigations while patching. They also dig into AI-powered vulnerability discovery, rapid security patching, defense-in-depth security, and why patch management gets harder the longer technical debt sits. This podcast is brought to you by Delta Systems, your one-stop shop for front-end, back-end, and full-stack software development. At Delta, Justin and Aaron share the same philosophy when it comes to clients: they treat people like colleagues, not just customers. Maybe that’s why Delta typically spends years working with the same companies: how many software engineering firms can you say that about? So, if you’ve got a big SaaS project in mind but have no idea where to start, come and get a free scope and estimate from Delta Systems at: https://go.fame.so/J1TUtvR2 Got a burning idea for an episode, or a SaaS question you absolutely must know the answer to? Leave us a voice memo: https://www.speakpipe.com/SaasThatApp

Bootstrapping a SaaS company, pricing AI features at a flat rate, and testing AI agents: Adam Sandman has done all three without VC. Twenty years after founding Inflectra, he has grown the software testing company from roughly $1M to over $20M in self-reported revenue. In this episode of SaaS That App, Adam joins Aaron Marchbanks and Justin Edwards to explain why he skipped venture capital, how a “land small, upsell later” sales motion keeps objections low, and why Inflectra bundles AI into a fixed-price subscription instead of billing customers for tokens. He also shares how AI keeps moving the bottleneck in software development, and why the industry still needs a new version of agile to keep up. This podcast is brought to you by Delta Systems, your one-stop shop for front-end, back-end, and full-stack software development. At Delta, Justin and Aaron share the same philosophy when it comes to clients: they treat people like colleagues, not just customers. Maybe that’s why Delta typically spends years working with the same companies: how many software engineering firms can you say that about? So, if you’ve got a big SaaS project in mind but have no idea where to start, come and get a free scope and estimate from Delta Systems at: https://deltasystems.com/?utm_source=podcast&utm_medium=show-notes&utm_campaign=saas-that-app-building-b2b-web-applications-show Got a burning idea for an episode, or a SaaS question you absolutely must know the answer to? Leave us a voice memo: https://www.speakpipe.com/SaasThatApp

Privacy compliance shouldn’t slow SaaS product development. But treating privacy and AI governance as an afterthought can create bigger problems once the product is already live. In this episode of Saas That App, Lindsay Vogel joins Aaron Marchbanks and Justin Edwards to unpack why strong privacy and AI governance starts much earlier. Turns out, the key lies in better questions, clearer accountability and a real understanding of how data moves through the business. From copy-paste privacy policies to “reject all” buttons and the murky question of putting client data into ChatGPT, she breaks down all the decisions SaaS teams can’t afford to treat as an afterthought. This podcast is brought to you by Delta Systems, your one-stop shop for front-end, back-end, and full-stack software development. At Delta, Justin and Aaron share the same philosophy when it comes to clients: they treat people like colleagues, not just customers. Maybe that’s why Delta typically spends years working with the same companies: how many software engineering firms can you say that about? So, if you’ve got a big SaaS project in mind but have no idea where to start, come and get a free scope and estimate from Delta Systems at: https://deltasystems.com/?utm_source=podcast&utm_medium=show-notes&utm_campaign=saas-that-app-building-b2b-web-applications-show Got a burning idea for an episode, or a SaaS question you absolutely must know the answer to? Leave us a voice memo: https://www.speakpipe.com/SaasThatApp

Before AI can run your business, your business needs something for AI to run on. Isaac Harmon, founder of Harmon Digital and Unstack, joins Aaron Marchbanks and Justin Edwards to talk about where automation hits its limits. They cover the signals that a company has outgrown its systems, why tools like CRMs have lost their moat, and when businesses should import and customize existing software rather than build from scratch. They also dig into how the bottleneck is shifting from the people doing the work to the people checking it, and what that means for anyone relying on orchestration agents. This podcast is brought to you by Delta Systems, your one-stop shop for front-end, back-end, and full-stack software development. At Delta, Justin and Aaron share the same philosophy when it comes to clients: they treat people like colleagues, not just customers. Maybe that’s why Delta typically spends years working with the same companies: how many software engineering firms can you say that about? So, if you’ve got a big SaaS project in mind but have no idea where to start, come and get a free scope and estimate from Delta Systems at: https://deltasystems.com/?utm_source=podcast&utm_medium=show-notes&utm_campaign=saas-that-app-building-b2b-web-applications-show Got a burning idea for an episode, or a SaaS question you absolutely must know the answer to? Leave us a voice memo: https://www.speakpipe.com/SaasThatApp

In this episode, host Aaron Marchbanks sits down with Serial Saas Founder, Joseph Lee, to explore what building a $4M+ seafood startup taught him about selling software, adapting to changing markets, and building for the next era of B2B sales. Joseph shares how the collapse of the restaurant industry during COVID forced his company to pivot and pushed him into a much more hands-on sales role, where he experienced firsthand how frustrating traditional product demos could be. That experience eventually became the inspiration for Supademo and its approach to making software demos more interactive, accessible, and scalable. The conversation also looks at why Joseph believes the traditional “book a demo” model is becoming outdated, how autonomous AI agents could change the pre-sale experience, and why AI should support sales teams rather than replace the human relationships that ultimately drive deals. This podcast is brought to you by Delta Systems, your one-stop shop for front-end, back-end, and full-stack software development. At Delta, Justin and Aaron share the same philosophy when it comes to clients: they treat people like colleagues, not just customers. Maybe that’s why Delta typically spends years working with the same companies: how many software engineering firms can you say that about? So, if you’ve got a big SaaS project in mind but have no idea where to start, come and get a free scope and estimate from Delta Systems at: https://deltasystems.com/?utm_source=podcast&utm_medium=show-notes&utm_campaign=saas-that-app-building-b2b-web-applications-show Got a burning idea for an episode, or a SaaS question you absolutely must know the answer to? Leave us a voice memo: https://www.speakpipe.com/SaasThatApp

A file-upload vulnerability in Rails Active Storage just scored a 9.5 out of 10 on the severity scale, high enough that, as Justin Edwards puts it: "Everybody stop what you're working on and get this patched." In this episode of SaaS That App, Aaron Marchbanks and Justin break down what made this one so dangerous (anonymous, unprivileged file uploads were enough to compromise a server), why it took two separate patches to actually close the hole, and how they decided which client projects needed a full credential rotation and which didn't. This podcast is brought to you by Delta Systems, your one-stop shop for front-end, back-end, and full-stack software development. At Delta, Justin and Aaron share the same philosophy when it comes to clients: they treat people like colleagues, not just customers. Maybe that’s why Delta typically spends years working with the same companies: how many software engineering firms can you say that about? So, if you’ve got a big SaaS project in mind but have no idea where to start, come and get a free scope and estimate from Delta Systems at: https://deltasystems.com/?utm_source=podcast&utm_medium=show-notes&utm_campaign=saas-that-app-building-b2b-web-applications-show Got a burning idea for an episode, or a SaaS question you absolutely must know the answer to? Leave us a voice memo: https://www.speakpipe.com/SaasThatApp

AI-powered SOC 2 compliance for SaaS startups is transforming how early-stage founders tackle audit readiness, and Varun Jain is leading the charge. The co-founder and CEO of ComplyJet joins hosts Aaron Marchbanks and Justin Edwards in this episode of SaaS That App to break down why compliance doesn’t have to be the terrifying, expensive nightmare most early-stage founders assume it is. This podcast is brought to you by Delta Systems, your one-stop shop for front-end, back-end, and full-stack software development. At Delta, Justin and Aaron share the same philosophy when it comes to clients: they treat people like colleagues, not just customers. Maybe that’s why Delta typically spends years working with the same companies: how many software engineering firms can you say that about? So, if you’ve got a big SaaS project in mind but have no idea where to start, come and get a free scope and estimate from Delta Systems at: https://deltasystems.com/?utm_source=podcast&utm_medium=show-notes&utm_campaign=saas-that-app-building-b2b-web-applications-show Got a burning idea for an episode, or a SaaS question you absolutely must know the answer to? Leave us a voice memo: https://www.speakpipe.com/SaasThatApp

AI app development with Claude is making micro-SaaS, no-code software, and niche startup ideas faster and cheaper to build than ever before. Justin Edwards had a hyper-specific problem: he wanted a better way to drill German grammar, but the tool he wanted didn’t exist. So he described it to Claude and, roughly eight hours later, had a working app. In this episode of SaaS That App, Aaron Marchbanks and Justin use Schleifer as a real-world experiment in what happens when AI makes small, niche software ideas cheap and fast enough to build yourself. They get into why this could put pressure on micro-SaaS products, why trust and expertise may become the new moat, where vibe coding stops being safe, and why the same technology could turn thousands of people who never considered themselves founders into software entrepreneurs. This podcast is brought to you by Delta Systems, your one-stop shop for front-end, back-end, and full-stack software development. At Delta, Justin and Aaron share the same philosophy when it comes to clients: they treat people like colleagues, not just customers. Maybe that’s why Delta typically spends years working with the same companies: how many software engineering firms can you say that about? So, if you’ve got a big SaaS project in mind but have no idea where to start, come and get a free scope and estimate from Delta Systems at: https://deltasystems.com/?utm_source=podcast&utm_medium=show-notes&utm_campaign=saas-that-app-building-b2b-web-applications-show Got a burning idea for an episode, or a SaaS question you absolutely must know the answer to? Leave us a voice memo: https://www.speakpipe.com/SaasThatApp