Blog & Insights

Sharing knowledge

Here, we share insights, tips, and news from the world of software development. We explore the latest trends, offer solutions for common challenges, and provide a glimpse into our projects.

NuGet.NET

NuGet Version Locking: Why Your Build Should Never Depend on the Day You Run It

A NuGet restore can pull different package versions on Monday than it did on Friday – without a single line of your code changing. Lock files (packages.lock.json) and locked-mode restore fix that. We look at what version locking is, why it matters for reproducible and secure builds, and why almost every other ecosystem has done this for years.

Jul 10, 2026•Development

Sascha Kiefer•Jul 10, 2026•Development

aspirepython

Aspire Goes Polyglot: Python, JavaScript, Go, and TypeScript

Aspire was long called .NET Aspire – that's history now. Since version 13, Python, JavaScript, Go, and Bun are equal citizens in the AppHost. What this means for heterogeneous microservice landscapes.

Jul 6, 2026•DevOps

Sven Hennessen•Jul 6, 2026•DevOps

SecurityAI

AI Has Seen Every Security Hole Ever Found — And Now It Can Combine Them Into New Attacks

Every CVE, every exploit proof-of-concept, every CTF write-up is in the training data. Frontier models have effectively read the entire written history of how software breaks – and the uncomfortable new part is that they can chain unrelated weaknesses into working exploit chains faster than any human team. We look at the real 2024–2026 evidence, the sober counterpoints, and what it means for how you defend.

Jul 3, 2026•AI & Agents

Sascha Kiefer•Jul 3, 2026•AI & Agents

dotnetaspire

Aspire 13: New Architecture, New Developer Experience

Aspire 13 didn't just get new features – the entire internal architecture was rebuilt. The pipeline model, single-file AppHost, and TypeScript support change how you work with Aspire.

Jun 29, 2026•DevOps

Sven Hennessen•Jun 29, 2026•DevOps

Artificial IntelligenceAI Strategy

AI Without a Plan: Why Companies Burn Money - and How Clear Processes Win It Back

Many companies adopt AI chaotically - no strategy, no defined processes, everyone doing their own thing. It creates costs that could be avoided. We show what the research says about failed AI projects and how clear processes make the difference.

Jun 28, 2026•Insights

Sascha Kiefer•Jun 28, 2026•Insights

MCPSecurity

MCP Security: When AI Gets Access That Only Humans Should Have

The Model Context Protocol gives AI agents access to systems, databases, and repositories. The problem: that access often belongs in the hands of a few authorized people – not an AI that reads every piece of text as a potential instruction. We look at real 2025/2026 incidents and the lessons they teach.

Jun 25, 2026•AI & Agents

Sascha Kiefer•Jun 25, 2026•AI & Agents

HTTP.NET

The New HTTP QUERY Method – and How to Use It Today with .NET 10

Search over GET eventually blows up your URL; search over POST is neither safe, idempotent, nor cacheable. The new HTTP QUERY method (RFC 10008) closes exactly that gap: a request body like POST, but with the guarantees of GET. We look at the problem QUERY solves, what its semantics mean in detail, and how .NET 10 already supports it on both the client and server side.

Jun 24, 2026•Development

Sascha Kiefer•Jun 24, 2026•Development

dotnetaspire

aspire deploy – What Actually Happens?

Aspire 13 brought real platform breadth to deployment: Docker Compose, Kubernetes, AKS, and Azure App Service as fully supported targets – with Helm under the hood.

Jun 22, 2026•DevOps

Sven Hennessen•Jun 22, 2026•DevOps

Local AISelf-Hosting

Is a Local AI Setup Really Worth It for a Company?

When is a self-hosted language model the right decision - and what organizational, financial, and regulatory prerequisites does a company need to bring to the table? A decision-making basis on the true costs, the break-even point, and the prerequisites for self-hosting language models.

Jun 19, 2026•AI & Agents

Sascha Kiefer•Jun 19, 2026•AI & Agents

Custom SoftwareMittelstand

Can an SME Even Build Custom Software for the Mittelstand?

Don't you need a corporation with 500 developers for that? No. We at vensas are a small company ourselves – and in 2026, 'no' is actually the better answer. Three reasons why proximity, not size, is the real lever today.

Jun 18, 2026•Insights

Sascha Kiefer•Jun 18, 2026•Insights

OpenRouterLLM Gateway

OpenRouter Explained: One API for Every LLM - and What It Means for EU Teams

OpenRouter promises a single API for hundreds of language models across dozens of providers. We explain what it is, how it actually works, what it costs, where it helps and hurts - and, crucially for European teams, how it stacks up on GDPR and data residency against its competitors, including the EU-based alternatives.

Jun 17, 2026•AI & Agents

Sascha Kiefer•Jun 17, 2026•AI & Agents

dotnetaspire

.NET Aspire 9 and the Deployment Problem

Aspire 9 promised orchestrated microservices – but deployment revealed a critical blind spot: Helm charts could be generated, but not deployed.

Jun 16, 2026•DevOps

Sven Hennessen•Jun 16, 2026•DevOps

AI AgentsClaude Code

The Three Layers of Working With AI: Spec, Verifier, and Environment

Most people prompt AI agents wrong. Drawing on Andrej Karpathy's method, we break down the three layers that turn an AI assistant into a reliable collaborator - the spec, the verifier, and the environment - and show how to apply each one.

Jun 13, 2026•AI & Agents

Sascha Kiefer•Jun 13, 2026•AI & Agents

GovTechHackathon

From Idea to Victory: OpenFlow and F13 at the GovTech Hackathon Saarland

Our Co-Managing Director Sven Hennessen won the GovTech Hackathon Saarland 2025 with OpenFlow - a platform that makes government processes discoverable. A look at the project, the sovereign AI platform F13, and the future of digital public administration.

Jun 12, 2026•Insights

vensas GmbH•Jun 12, 2026•Insights

.NETASP.NET Core

Modern .NET Development: Building Scalable Solutions

From .NET 1.0 to Semantic Kernel, vensas is your software development team and implementation partner for robust .NET applications.

May 10, 2026•Development

Sven Hennessen•May 10, 2026•Development

Requirements EngineeringAI

Requirements Engineering 2026: AI, SMEs, and the End of Knowledge Monopolies

AI writes your user stories now? Maybe. But it doesn't solve your biggest problem: knowledge trapped in the heads of individual employees. Especially in SMEs.

Mar 30, 2026•Insights

Sven Hennessen•Mar 30, 2026•Insights

Requirements EngineeringSoftware Architecture

The Requirements Cycle: Why a One-Time Specification Doesn't Work

Requirements change. Always. We show you why you need to understand Requirements Engineering as a continuous cycle – not a one-off checklist.

Mar 23, 2026•Insights

Sven Hennessen•Mar 23, 2026•Insights

Requirements EngineeringSoftware Projects

Requirements Engineering: Why Your Project Doesn't Fail Because of Technology

Frameworks work, the cloud scales. Yet projects fail – mostly because we build the wrong thing. We show you how to stay focused with use cases and early vertical slices.

Mar 16, 2026•Insights

Sven Hennessen•Mar 16, 2026•Insights

AI AgentsMCP

MCP vs CLI Tools: The Cost Comparison Every AI Developer Needs to See

A deep dive into the token economics of Model Context Protocol versus traditional CLI tools for AI agents. Spoiler: CLI often wins by 60-90% on cost.

Mar 3, 2026•AI & Agents

Sascha Kiefer•Mar 3, 2026•AI & Agents

AI AgentsWebMCP

WebMCP: Turning Websites into AI-Ready Interfaces

How WebMCP transforms any webpage into an intelligent, agent-ready interface using the Model Context Protocol - without brittle screen scraping or slow automation tools.

Feb 25, 2026•AI & Agents

Sascha Kiefer•Feb 25, 2026•AI & Agents

AI Coding AgentsData Privacy

Self-Hosted AI Coding Agents - Data Privacy and Local Alternatives

Exploring local alternatives to GitHub Copilot and Claude Code for enhanced data privacy. A technical comparison of OpenCode.ai and Claude Code CLI with custom backends, including setup instructions, quality analysis, and GDPR compliance considerations.

Feb 9, 2026•AI & Agents

Sven Hennessen•Feb 9, 2026•AI & Agents

AICareer Development

From Junior to Senior in the Age of AI: The Right Way to Level Up

AI won't make you a senior developer—but used correctly, it can accelerate your path to becoming one. Here's how to use AI as a learning tool, not a crutch.

Feb 6, 2026•AI & Agents

Sascha Kiefer•Feb 6, 2026•AI & Agents

Software ArchitectureTeam Organization

Conway's Law - Why Your Software Looks Like Your Company

Conway's Law shows that software architectures reflect the communication structures of an organization. We explain why this is often costly and how to do it better – from startups to enterprises.

Jan 29, 2026•Insights

Sven Hennessen•Jan 29, 2026•Insights

Git WorktreesAI Agents

Scaling Development with Git Worktrees and AI Agents

Git Worktrees enable parallel development across multiple branches simultaneously. Combined with AI coding agents, they unlock entirely new possibilities for efficient, scalable workflows - like having a virtual development team on a single machine.

Jan 25, 2026•AI & Agents

Sascha Kiefer•Jan 25, 2026•AI & Agents

Code ReviewAI

Code Reviews in the Age of Coding Agents

For companies using coding agents, questions arise: How do we handle generated code? Do we still need to review it? And who bears the responsibility?

Jan 16, 2026•AI & Agents

Sven Hennessen•Jan 16, 2026•AI & Agents

Process OptimizationBusiness Processes

The Most Expensive Process in Your Company - And Why You're Probably Not Optimizing It

Many companies know their resource-intensive processes but underestimate their true costs. We show why inefficient workflows are often more expensive than expected and how targeted process optimization helps reduce costs - without major IT projects.

Jan 15, 2026•Insights

Sascha Kiefer•Jan 15, 2026•Insights

Case StudyMigration

Case Study - Migrating a Xamarin.Forms App to .NET MAUI at DATAflor

How we supported DATAflor in the gradual migration of a productive Xamarin.Forms multi-project codebase to a modern .NET MAUI application – with minimal risk, close team collaboration, and a focus on time-to-market

Oct 10, 2025•Development

Sven Hennessen•Oct 10, 2025•Development

Software DevelopmentCustom Software

'Which industry are you experts in?' – None, and that's exactly our strength!

We believe that good software doesn't arise from industry specialization, but from a structured approach and asking the right questions. With our unbiased view of core processes and consistent focus on quality, we develop individual solutions – with or without AI.

Jul 9, 2025•Insights

Sven Hennessen•Jul 9, 2025•Insights

“ASP.NET Core”“HTTPClients”

HTTPClients in ASP.NET Core - DelegatingHandlers vs PrimaryMessageHandlers

How to combine DelegatingHandlers and PrimaryMessageHandlers with named HTTP clients in ASP.NET Core for modular, reliable interfaces to external services.

Mar 7, 2025•Development

Sven Hennessen•Mar 7, 2025•Development

UI TestingPlaywright

UI Testing with Playwright

BUGS! Playwright is one of many popular testing tools for UI-driven end-to-end tests. In this post, we highlight several approaches and decisions that can help optimize test strategies, reduce effort, and improve quality.

Feb 14, 2025•DevOps

Sven Hennessen•Feb 14, 2025•DevOps

.NET.NET 9

DATAS and Server Garbage Collection in .NET 9

.NET 9 brings numerous optimizations regarding performance and resource management. DATAS and Server Garbage Collection help run .NET services on Kubernetes more cost-effectively.

Jan 26, 2025•Development

Sven Hennessen•Jan 26, 2025•Development

Code ReviewsCollaboration

How to Conduct Effective Code Reviews

Code reviews are an indispensable part of modern software development. But how to do a truly impactful code review?

Jan 20, 2025•DevOps

Sascha Kiefer•Jan 20, 2025•DevOps

.NET MAUIHybridWebView

.NET MAUI 9 HybridWebView

How to use the HybridWebView in .NET MAUI 9 to call native .NET and device APIs from JavaScript, building hybrid apps that combine web content with native capabilities.

Nov 18, 2024•Development

Sven Hennessen•Nov 18, 2024•Development

Architecture Decision RecordsADRs

Architecture Decision Records

How to use Architecture Decision Records to document architectural decisions along with their rationale and consequences — for small and large projects alike.

Oct 11, 2024•DevOps

Sven Hennessen•Oct 11, 2024•DevOps

dotnetc#

.NET Evolution: Is Upgrading to the Latest Version Worth the Effort?

In this article we compare performance improvements in .NET 6, .NET 8 and .NET 9 to discuss whether an upgrade is actually worthwhile for your projects or clients.

Oct 2, 2024•Development

Sascha Kiefer•Oct 2, 2024•Development

RemoteRemote Work

On Working Remotely

Benefits, implications, pitfalls and how vensas approaches the topic of remote work

Sep 27, 2024•Insights

Sven Hennessen•Sep 27, 2024•Insights

dotnetc#

Discriminated Unions Are (Maybe) Coming to C#

Discriminated Unions are a new feature potentially coming to C#, allowing developers to handle data types more safely and flexibly.

Sep 4, 2024•Development

Sascha Kiefer•Sep 4, 2024•Development

azureazure devops

Securing Azure DevOps Pipelines with Approvals and Exclusive Locks

How to protect Azure DevOps Pipelines against concurrent access using Exclusive Locks and gate critical deployments behind manual approval.

Jul 19, 2024•DevOps

Sven Hennessen•Jul 19, 2024•DevOps

azureazure devops

Continuous Deployment with Azure DevOps

How to create reusable pipelines with Azure DevOps and YAML templates, and define and automate deployment processes across teams.

Jun 11, 2024•DevOps

Sven Hennessen•Jun 11, 2024•DevOps

dotnetc#

Building Generative AI Applications with Phi-3 SLM, C# Semantic Kernel and Ollama

In this article we show how to build generative AI applications using Phi-3 SLM, C# Semantic Kernel and Ollama.

Jun 4, 2024•AI & Agents

Sascha Kiefer•Jun 4, 2024•AI & Agents