Many established companies run daily operations on software a small team wrote over a decade ago. The software still works, but only one or two people maintain it. This article describes how Plexteq approaches such a system, using a recent engagement with a European production facility as an example: a 75,000-line Delphi XE2 application with a companion PHP application and a shared MySQL database, developed and maintained by a single engineer. We recommended not rewriting it because the...

1 Introduction Historically, software security focused on in-house code, with teams reviewing developer output, running static analysis, and auditing completed applications. This approach assumed organizations authored most of their software. Today, that is no longer the case, and security concerns now extend across the entire delivery chain. The demand for faster delivery and greater returns has reshaped software engineering. Today, applications are built from open-source libraries,...

Despite regulatory pressure and massive efforts to strengthen cybersecurity, attacks continue to succeed, and healthcare organizations remain at substantial risk. Cyberattacks on healthcare are growing. According to the 2025 Ponemon Healthcare Cybersecurity Report, 93% of the organizations asked had experienced at least one cyberattack, with nearly three in four US healthcare organizations reporting related patient care disruption. These numbers aren't an outlier. Report after report tells...