Today, two critical flaws were disclosed in PHP, the language behind roughly 70% of websites whose server-side language is known. Attackers can take over a server without ever logging in. Security researchers have estimated more than 22 million exposed instances, and exploitation attempts started before the patch was even released.

Large companies handle days like this with a dedicated security team. They inventory what they run, patch within hours, and watch for signs of compromise.

However with explosion of vibe coded apps and custom built CRMs. Someone ships a tool in a weekend, it works, and everyone was clapping to them. But who is patching the server underneath it tonight? Do they even knows which PHP version it runs?

And this isn’t only a problem if they built their own CRM. If a vendor, an agency, or a consultant runs on a vibe coded system, probably your customers’ names, emails, phone numbers and deal history sit on a server that may never get patched. Attackers anywhere in the world scan for exactly that.

Security and data protection are the least discussed topics in all the AI and vibe-coding hype, and they may be the most important.

Before you trust any platform with your customer data, ask who maintains it after launch. Speed to build nowadays is impressive. Responsibility after you build is what protects your customers.

If you need a CRM that lasts, talk to a CRM expert before you build or buy. A sustainable system comes with proper security, maintenance, and support behind it, not just a fast launch.

Not selling anything and there's no sign up. I'm looking for ideas from people who run files every day. A little different than the typical "CRM" posted here but it is in a similar vein of tracking data.

I work DSCR, fix and flip, new construction and multifamily loans, and I got tired of tracking needs lists, title and insurance orders, rate locks and close dates across a dozen places. So I built my own system, and it now runs a pipeline of 100+ loans.

What it does so far:

- One page per file, from first call to closing

- Paste a lender's conditions email and it becomes a needs list, split into borrower, entity, property, title and insurance

- Follow ups tracked per list (borrower vs title vs insurance), so you know what went out and when

- Title and insurance orders written from what's already on the file

- A flag when a rate lock or close date is five business days out

There's a demo with made-up loans if you want to click around. It gives you your own private copy and resets every night: link in comments.

What I actually want to know:

1. What do you still track by hand, in a spreadsheet, or in your head?

2. What's the thing that slips on your busiest weeks?

3. If you tried the demo, what felt missing or clunky?

Appreciate any thoughts, even "I'd never use this because..."

I've been building a small tool around lead management, and before I take it any further, I want to understand how people actually deal with their leads.

I've noticed that a lot of small businesses and even reps seem to dislike CRMs, but I'm trying to figure out why rather than assuming I know the answer.

For people who manage leads/prospects regularly:

• What's the most annoying part of using your CRM?
• Do you find yourself manually entering/updating a lot of information?
• Do you actually keep your CRM updated, or does it eventually become outdated?
• Do you use the CRM's pipeline/deal stages, or do they not really match how your business works?
• How do you remember what happened during calls/emails and what needs to happen next?
• When you have a bunch of active leads, how do you decide which ones actually need your attention today?
• Is there anything you wish your CRM would just handle automatically?

And if you don't use a CRM, I'm especially interested in hearing why.

I'm not looking for recommendations for another CRM. I'm trying to understand what makes people dislike using them in the first place.

Would love to hear your experiences 🙌

I build custom CRMs and automation systems for small businesses, and the most common situation I walk into is this: the business owner is paying for a CRM, used it properly for 3 weeks, and is now back to WhatsApp and a spreadsheet. The subscription just quietly renews.

After enough of these, my honest take is that the problem usually isn’t the tool. The big CRMs are good software. The problem is fit:

Most CRMs are built around sales pipelines and deal stages. A travel agent, a clinic, a real estate broker, a trading company, they don’t think in deal stages. They think “waiting on visa”, “follow up Tuesday”, “docs pending”. Forcing their actual workflow into pipeline logic is more work than the notebook, so the notebook wins.

80% of features go unused but you pay for 100% of them, per seat, forever.

And the thing that actually makes money, follow ups happening automatically without anyone remembering, usually needs extra setup or add-ons anyway.

So my rule when someone asks: if an off-the-shelf CRM matches how you already work, absolutely buy it, it’s cheaper and battle-tested. Custom only makes sense when your workflow is unusual enough that you’re fighting the tool daily, or when the follow up automation matters more to you than the database part.

Right now I’m building one for a travel agent whose entire business runs on WhatsApp enquiries. His CRM is basically: enquiries auto-captured, trip statuses that match how he actually works, and a “what needs attention today” screen. Nothing else. He uses it daily, which is more than most paid CRM seats can say.

Curious what this community thinks, since most posts here are “which CRM should I pick”. How many of you have seen the bought-but-abandoned pattern? And where do you draw the line between configuring an existing CRM harder vs going custom?

For anyone selling through agencies (ads, media, SaaS resellers, marketplaces): when an agency gets credit or committed funding that's shared across its clients, how do you model it?

We've seen setups where the agency's funding and each client's spend end up as separate, manually linked records, and revenue rollups and remaining-balance tracking break down.

Curious: What CRM are you on (Salesforce, HubSpot, Dynamics, in-house)?

Custom objects, spreadsheets, or a finance system?

What still breaks?

I am writing a HubSpot AEO review and examining its features regarding visibility in AI-generated answers.

There are several features provided by HubSpot that could be used for that task. They include website and content tools which help to publish, CRM data that unites marketing, sales, and service in one place, and reporting to track results. It is important that everything is located within one platform that allows coordinating customer behavior and content. The problem lies in determining how much of the content appears in AI answers and measuring the process. I am also considering how much of it is handled by HubSpot and how much another software should be used.

What features of HubSpot do you find useful when working with AEO? How does its content and reporting compare to other software?