The numbers most SMBs find out too late.
How much AI really costs, how much extra you pay per token, how long it takes to reach mature security, and by when EU law sets the deadline. Every article answers a question a client asked us, with the source right next to it.
- Output token price106×
- Cost per automated taskUS$ 0,02/ticket
- The price of the leakUS$ 5
- High risk (Annex III)dez/2027
LLM output prices vary 106× between vendors. Your SMB pays the ceiling.
In September 2026, output from the priciest model in the public catalog (Claude Fable 5.1, $50 per 1M tokens) costs 106 times the cheapest one that still handles production work (Qwen3.8-Flash, $0.47). No SMB needs the top of that list to triage a support ticket or pull a field off an invoice. Run everything on one vendor and you pay the top price on 100% of requests.
All articles
What AI really costs in 2026: three bands, with the arithmetic shown
Ten people on ready-made subscriptions cost $317 a month. The API automation that handles 4,000 tickets in that same month costs $90 — $0.02 per ticket, with routing and caching. The expensive band is not the one you expect, and the number that decides the project is not on the vendor invoice.
OWASP LLM Top 10 (2025): five risks already in the incident record — and how to cover each
The 2025 OWASP list for LLM applications was rewritten after two years of real incidents. It does not replace the web Top 10 — it adds to it. For a team of five or ten engineers with an AI feature in production, the question is not knowing all ten items: it is knowing which five to close first, what each costs in engineering days, and what to check before the release.
The EU AI Act after the Digital Omnibus: the real calendar and a 90-day plan
On 2 August 2026 the EU AI Act became generally applicable and enforcement began. The Digital Omnibus, in force since 27 July 2026, pushed the high-risk rules to 2 December 2027 — and left everything else in place. If your company sells into the EU or processes EU residents' data, the comfortable window has already closed.
SAMM 0→3 in an SMB: 12 months, five practices, and the order that matters
OWASP SAMM has 90 activities and a 0-to-3 scale per practice. In the official benchmark, dominated by multinationals, the average is 1.44 — and Verification sits at 1.12. The bar for mature is lower than the word suggests. With tight scope and the right order, an SMB reaches level 3 on the critical practices in four quarters.
No loose opinions. Every number has a source, every article ends with what to do.
We write what we learn solving the problem for a client. If your situation looks like one of these, the conversation starts here.