
Security headers ship with your build
Security headers on static hosting used to mean bring your own nginx. Now they are a text file in your build root, and the origin applies them.
Ivan Roslov2 min read
Building Lessly in the open — decisions, retros, and the thinking behind the product.

Security headers on static hosting used to mean bring your own nginx. Now they are a text file in your build root, and the origin applies them.
Ivan Roslov2 min read
Static sites on Lessly answer AI agents in clean Markdown, with zero action from the owner.
Ivan Roslov2 min read
Domains, DNS, and routing managed from the same account as your deploys — scoped to the zones you choose.

One subscription plus metered usage in euros at printed rates — the full rate card at /pricing. No credits.

No credits, no house currency, and a build that fails when the pricing page disagrees with the invoices — the ideas inside /pricing.
Artur Sabirov1 min readEvents, journeys, and revenue by source — on your own domain, behind consent, readable without a data team.

Signups, consent records, cohorts, and invitations as an embeddable product — lessly.com runs on it.

One shared memory for your agents — searchable, backed up, source-traced, revocable.

An agent that forgets everything nightly is the most expensive amnesia a small team pays for. Brain is our answer — and why memory is custody too.
Artur Sabirov1 min read
The same platform and the same permissions, callable from any shell — for agents without an MCP client.

One of us moved to Pi-agent and hit a wall we'd built ourselves. The CLI is what we learned, shipped.
Artur Sabirov1 min read
Push to deploy with logs, previews, and rollback — Postgres provisioned next to it, backed up, restorable.

One set of pages for humans and agents — references held to the shipped surface.

The banner, the decision records, and the export — the visitor decides before anyone counts.

Agent access today is a switch with two settings: your root credentials, or nothing. This is the case for the scoped setting that should sit between them.
Artur Sabirov5 min read
Everything you can click, you and your agents can call — sessions named, scoped, revocable over OAuth2.

On Lessly your agent gets its own scoped, named, revocable grant — not a copy of your root key. Here's the difference, and how to check it the day you're in.
Artur Sabirov1 min read
One account for a founding team's deploy, database, cache, and secrets — with scoped, revocable access for people and agents.

Building a product got fast and joyful again. Keeping it running turned you into the ops team. Lessly is one account for the whole stack — so you can go back to building.
Artur Sabirov3 min read