Skip to main content
Insights

Latest thinking from the Fruition team

AI strategy, security research, and technical deep-dives from engineers and strategists building deployed platforms.

A Field Guide to How Practitioners Talk About LLMs
AI LLM Glossary Reference

A Field Guide to How Practitioners Talk About LLMs

We built a living glossary of the phrases people actually use to discuss large language models — KV cache, steering vectors, pass@k, MoE — with flashcard-style review at /tools/llm-lexicon. Here's why, and what 'shooting the vector' has to do with it.

Brad Anderson ·
What Open-Weight LLMs Actually Fit on a Single H200
AI Infrastructure LLM Deployment

What Open-Weight LLMs Actually Fit on a Single H200

Marketing benchmarks tell you a 123B model fits in 62 GB at FP8. The real footprint after vLLM loads it is 120 GB. Here's what 2026 open-weight LLMs actually need when you serve them as coding agent backends.

Brad Anderson ·
Q-Day: The Plan Is Crypto Agility
Security Cryptography PKI Infrastructure

Q-Day: The Plan Is Crypto Agility

Quantum computers will eventually break the RSA and elliptic-curve cryptography behind most encrypted traffic. The preparation that matters now is crypto agility: being able to swap algorithms quickly. What Q-Day is, what NIST's 2030 and 2035 deadlines require, and what agility looks like in practice.

Brad Anderson ·
47 Days: The End of Manual Certificate Management
Security PKI Infrastructure Hosting

47 Days: The End of Manual Certificate Management

The CA/Browser Forum approved a schedule cutting public TLS certificate validity from 398 days to 47 days by March 2029. Domain validation reuse drops to 10 days. Here is what is changing, why, and what breaks if you do not automate.

Brad Anderson ·
The April 24, 2026 ADA Compliance Deadline Is Here: What Government Agencies Need to Know About PDF Accessibility
Accessibility ADA Compliance PDF Remediation Government

The April 24, 2026 ADA Compliance Deadline Is Here: What Government Agencies Need to Know About PDF Accessibility

The federal deadline for state and local government digital accessibility compliance is April 24, 2026. If your agency serves a population of 50,000 or more, the clock has run out, and PDFs are likely your biggest remaining risk.

Jim Collins ·
When Your Website's Domain Is Also Your Active Directory Domain: Fixing Apex DNS Conflicts
Infrastructure Security

When Your Website's Domain Is Also Your Active Directory Domain: Fixing Apex DNS Conflicts

If your Active Directory domain matches your public website domain, internal users can't reach your site. Here's why it happens and how to fix it on every version of Windows Server.

Tony Diaz ·
SIPA GovGrants Spring 2026: Funding Available to Improve Digital Government Services in Colorado
Grants Civic Technology Colorado Government

SIPA GovGrants Spring 2026: Funding Available to Improve Digital Government Services in Colorado

The SIPA GovGrants Program is accepting applications through April 10, 2026. Here's what Colorado government entities need to know, and how digital presence projects can qualify.

Jim Collins ·
CVE-2025-55182: Critical RCE Vulnerability in React Server Components
Security React Next.js

CVE-2025-55182: Critical RCE Vulnerability in React Server Components

A critical Remote Code Execution vulnerability affects React Server Components in Next.js 15.x and 16.x applications. Here's what you need to know and how to patch immediately.

Brad Anderson ·
Securing Your ArcGIS Maps: A Government IT Director's Guide to Preventing Accidental Data Exposure
Government Technology Security GIS

Securing Your ArcGIS Maps: A Government IT Director's Guide to Preventing Accidental Data Exposure

Government GIS infrastructure contains sensitive data including facility locations, utility networks, and emergency routes. Here's how to prevent accidental data exposure.

Tony Diaz ·
How Spammers Exploit CloudFlare Zero Trust to Bypass Bot Protection (And How We Stopped Them)
Security CloudFlare Spam Prevention

How Spammers Exploit CloudFlare Zero Trust to Bypass Bot Protection (And How We Stopped Them)

Spam bots were exploiting CloudFlare Zero Trust infrastructure to circumvent bot protection. Here's how we achieved an 85% reduction in spam with a multi-layered defense strategy.

Tony Diaz ·
Understanding the Gravity Forms Security Incident: Lessons in Supply Chain Security
Security WordPress Supply Chain

Understanding the Gravity Forms Security Incident: Lessons in Supply Chain Security

The Gravity Forms supply chain incident highlights ongoing challenges in software development. Here's what happened and how to defend against supply chain attacks.

Brad Anderson ·
How AI Has Flipped the Buy vs Build Equation
AI & Automation Strategy

How AI Has Flipped the Buy vs Build Equation

Modern AI-powered development tools have collapsed custom-software costs by up to 80%, while SaaS subscription fees continue rising. Here's the new calculus.

Brad Anderson ·
CORS and CSP in the Age of AI: Why These Security Policies Are More Critical Than Ever
Security AI & Automation

CORS and CSP in the Age of AI: Why These Security Policies Are More Critical Than Ever

AI has transformed the digital threat environment. CORS and CSP have become indispensable defenses against this new threat landscape.

Tony Diaz ·
The Website Redesign Process: What to Expect Before You Start
Web Development UX Design

The Website Redesign Process: What to Expect Before You Start

Redesigning a website requires strategic planning for success. Here's a complete guide to preparing for your website redesign project.

Chance Carlin ·
Enhancing Website Accessibility with Fruition AI's Auto Alt Text Automation
AI & Automation Accessibility SEO

Enhancing Website Accessibility with Fruition AI's Auto Alt Text Automation

Fruition AI automates alt text generation and updates for images across various platforms, improving accessibility and SEO at scale.

Brad Anderson ·
AI for Content Creation: Top 10 Mistakes and How to Avoid Them
AI & Automation Content Marketing

AI for Content Creation: Top 10 Mistakes and How to Avoid Them

Almost 11% of Fortune 500 blog articles are likely AI-generated. Here are the 10 most common mistakes and how to avoid them.

Emily Fournier ·
Fruition Achieves SOC2 and ISO 27001 Certifications with HIPAA Compliance Endorsement
Security Compliance

Fruition Achieves SOC2 and ISO 27001 Certifications with HIPAA Compliance Endorsement

Fruition announces successful attainment of SOC2 and ISO 27001 certifications with auditor approval for HIPAA compliance.

Brad Anderson ·
Outsource Digital Marketing with Confidence: A CEO's Guide to Overcoming Common Challenges
Digital Marketing Strategy

Outsource Digital Marketing with Confidence: A CEO's Guide to Overcoming Common Challenges

A practical guide for business leaders on how to successfully outsource digital marketing while maintaining control, quality, and brand consistency.

Jim Collins ·

Want insights delivered to your inbox?

Subscribe to our monthly newsletter for AI strategy and technical deep-dives.

Subscribe Start a Conversation