https://shutthegoatup.com/writing/ Shut The Goat Up is a product engineering company from London. We build software that takes on the incumbents — real-time 3D, payments, and the platforms underneath them. en-GB Shut The Goat Up Ltd Wed, 09 Sep 2026 00:00:00 GMT https://shutthegoatup.com/writing/my-biggest-fuck-up/ https://shutthegoatup.com/writing/my-biggest-fuck-up/ Twenty-two years old, first day as a developer, production database dropped. What happened next is the whole argument for what an engineering culture actually is. Thu, 23 May 2024 00:00:00 GMT Culture Reliability https://shutthegoatup.com/writing/lies-damned-lies-and-complexity/ https://shutthegoatup.com/writing/lies-damned-lies-and-complexity/ We built the first cloud in Europe and replaced the hypervisor in 30 days when Oracle pulled the licences. Most of what gets called complexity is just ignorance with a talking point attached. Thu, 16 May 2024 00:00:00 GMT Platform engineering Culture https://shutthegoatup.com/writing/the-hiring-pool/ https://shutthegoatup.com/writing/the-hiring-pool/ “Your standards are too high” and “your process is too long” are both right and both wrong. On turning down big tech, and building a hiring process that qualifies competency without taking three months. Tue, 14 May 2024 00:00:00 GMT Hiring Leadership Culture https://shutthegoatup.com/writing/continuous-improvement/ https://shutthegoatup.com/writing/continuous-improvement/ The no-asshole rule works when you also pay top of market and qualify competency. Without those, it becomes the tool that removes the person saying the company is not very good at this. Fri, 10 May 2024 00:00:00 GMT Leadership Culture https://shutthegoatup.com/writing/culture-of-competency/ https://shutthegoatup.com/writing/culture-of-competency/ “Technology is easy; culture is hard” is a sales pitch. In a business that sells software, the engineering org is the engine that delivers revenue, and its competency is the culture. Thu, 02 May 2024 00:00:00 GMT Leadership Hiring Culture https://shutthegoatup.com/writing/3-reasons-you-shouldnt-hire-a-technical-cto/ https://shutthegoatup.com/writing/3-reasons-you-shouldnt-hire-a-technical-cto/ A straight-faced case for hiring a visionary who works on the org rather than in it, staffing eight layers of oversight above the developer, and then offshoring the developer. Tue, 30 Apr 2024 00:00:00 GMT Leadership Hiring https://shutthegoatup.com/writing/nobody-expects-the-thundering-herd/ https://shutthegoatup.com/writing/nobody-expects-the-thundering-herd/ Servers fell over every lunchtime. A blocking query backed up the syncs, the retries took out the cache, the cache took out auth, and 40,000 customers stopped trading. Pulling the security group bought a day at a time. Sat, 19 Nov 2022 00:00:00 GMT Reliability Platform engineering https://shutthegoatup.com/writing/the-iron-grip-of-legacy-it/ https://shutthegoatup.com/writing/the-iron-grip-of-legacy-it/ Six months into a transformation programme, told as a horror story: the AWS account that never arrives, the Windows EDR running under Wine, and the change board that approves it. Tue, 20 Aug 2019 00:00:00 GMT Platform engineering Security Culture https://shutthegoatup.com/writing/end-user-devices-dont-matter/ https://shutthegoatup.com/writing/end-user-devices-dont-matter/ A CISO, a consultancy and nine and a half million dollars of endpoint tooling. You cannot secure the end user device — so stop putting it inside the trusted network. Sun, 18 Aug 2019 00:00:00 GMT Security Platform engineering https://shutthegoatup.com/writing/devops-is-going-to-get-you-hacked/ https://shutthegoatup.com/writing/devops-is-going-to-get-you-hacked/ Three consultants stand up Bitbucket, Jenkins and AWS, and it passes assurance. A mistyped username, credentials in a public repo and a token on a compromised laptop — none of which a pentest looks at. Sat, 03 Aug 2019 00:00:00 GMT Security Platform engineering Culture https://shutthegoatup.com/writing/learning-from-capital-ones-misery/ https://shutthegoatup.com/writing/learning-from-capital-ones-misery/ A misconfigured firewall, an over-privileged role, unencrypted PII and nobody watching the egress. Four failures, and the peer review, SAST, DAST and monitoring that catch each one. Tue, 30 Jul 2019 00:00:00 GMT Security Platform engineering