Talivio Blog

Blog

Product launches, engineering notes, and company updates from Talivio Technology.

Engineering

48 Hours of php2shell: How We Handled a Leaked PHP Zero-Day

Two critical remote code execution bugs in PHP itself leaked a day before the fix. Here is what we did between the first rumour and the last patched server — the interim measures, the attack-trace sweep, the patching around an overloaded package mirror, and the hardening that stays in place.

Oct 21, 2026 · 6 min read

Product Constructio: Build Your House in the Right Order, and Keep the Money in Check Constructio turns a builder's phase-by-phase list into software: a 22-phase work plan from permit to occupancy, quantities and cost straight from your SketchUp, Revit or ArchiCAD model, purchase dates, payments and a team with roles. Planning is free; you pay only when the build starts. Oct 17, 2026 · 7 min read Read article →
Product C-Twin: A Playable Digital Twin of Istanbul, Starting Where We Live C-Twin is a browser-based 3D twin of Istanbul. Two pilot districts, Kayabaşı and Tuzla, are joined by the whole TEM corridor; live weather and transit flow in, and a Talivio account lets you walk, drive and ride the trains. We started where our developers live, and the next link runs from Istanbul to our office in Tallinn. Early, free, and honest about what is still switched off. Oct 14, 2026 · 7 min read Read article →
Product Citablio: Can ChatGPT, Claude and Perplexity Actually Reach Your Site? Before an AI answer engine can cite your page, its crawler has to be allowed in, get past your CDN, and find real text without running JavaScript. Citablio checks exactly that — deterministically, with evidence you can verify — and it never promises citations or rankings. Here is what it measures, what it deliberately does not, and what we learned scanning real sites. Sep 16, 2026 · 7 min read Read article →
Product Replio Is Live: WhatsApp Support With an Autonomy Dial Most WhatsApp automation asks you to pick a side: rigid keyword bots that frustrate customers, or an AI you have to trust with your pricing. Replio makes autonomy a setting rather than a commitment — mechanical rules, a full AI agent, or a hybrid where nothing sends until a human approves it. Aug 14, 2026 · 6 min read Read article →
Research Balloon or Pressure Pipe? Either Way, Cheap AI Ends Everyone assumes an AI crash would leave us with cheap compute, the way the dot-com bust left us with cheap bandwidth. I think that's the wrong lesson. Fiber sat in the ground and stayed fiber; a GPU is a melting ice cube with an electricity bill. Here is why I expect the cost of using AI to go up, not down — and what we are building on that assumption. Aug 13, 2026 · 8 min read Read article →
Research The Quality Dial AI Providers Won't Show You Anthropic says it never reduces model quality for demand, time of day, or server load. xAI's own staff say Grok's limits "can fluctuate daily." Google's own help page says it changes limits during high demand "to maintain a high standard of quality." All three can be true at once, because nobody outside these companies can actually measure what a model delivers hour to hour. That's not a PR problem. It's a regulatory gap, and it should close. Aug 6, 2026 · 9 min read Read article →
Product Introducing Talivio News: An AI-Written, Editorially Governed Newsroom We just launched news.talivio.com — a newsroom where every article is researched, written, fact-checked and published by AI agents around the clock, with a permanent AI byline on every piece and a public transparency page explaining exactly how it works. It's also a live, running demo of the AI publishing engine behind our upcoming media-monitoring and briefing product. Jul 22, 2026 · 5 min read Read article →
Product Samplio: Test Your Message on a Synthetic Europe Before You Spend the Budget Classic message testing is slow and expensive: recruit a panel, run fieldwork, wait weeks. Samplio simulates how EU consumer segments react to your copy in about a minute — on synthetic populations built from real Eurostat data, in the audience's own language. And it is honest by mechanism: every result is watermarked as a synthetic simulation, and no accuracy figure appears until it is measured against real cases. Jul 17, 2026 · 6 min read Read article →
Engineering Conditional Surveys in VoxSim: Skip Logic Without Trusting the Model to Do the Math VoxSim's synthetic polling module now runs customer-defined surveys with skip logic — ask a follow-up only of the people who gave a particular answer. The design point is that the LLM never computes the branching: it reports each question's distribution within the subgroup that reaches it, and PHP multiplies out the tree. Shipped on the web app, the API, and a new command-line client. Jul 16, 2026 · 7 min read Read article →
Product Reservio: Reservation Management Built for Gyms and Fitness Chains Gyms don't book single appointments — they sell packages of sessions that have to stay in sync with payments and agreements. Reservio ties packets, training sessions, and Turkish payment rails together, with multi-branch support and BİR Fatura e-invoicing built in. Jul 15, 2026 · 5 min read Read article →
Product Introducing Talivio Accounts: One Sign-In for Everything Talivio Every Talivio product used to ask for its own account. Now one identity signs you into all of them — a Google-style "Continue with Talivio Accounts" button backed by OAuth 2.0 with PKCE, a central page to manage your profile and revoke app access, one-click data export, and account deletion that cascades to every connected product. Jul 13, 2026 · 5 min read Read article →
Product Invonio Grows Up: Live Peppol Delivery, a Free Receiving Tier, and a Public E-Invoice Validator Days after its beta launch, Invonio's scope has grown considerably: invoices now travel the Peppol network with live delivery tracking, receiving and archiving e-invoices is free forever, a public EN 16931 validator checks any invoice without an account, and France's PDP channel is wired in. Founding Price stays: €24/year, locked for life, for the first 500 accounts. Jul 13, 2026 · 8 min read Read article →
Product CreditOps Is Live: The Operations Layer Shopify Store Credit Is Missing Native Shopify store credit issues a balance and lets customers spend it — nothing else. CreditOps adds what's missing: an automatic refund-to-credit bonus triggered off real refunds, an expiry policy that reminds customers on its own, an accounting-grade liability and breakage report, and CSV bulk top-up. Now open in beta at $24/month. Jul 10, 2026 · 5 min read Read article →
Product Creditio Is Live: Real Credit Limits for Shopify's Native B2B Shopify B2B went to every plan in April 2026, but "net terms" is still just a label — no credit limit, no overdue checkout block, no automatic follow-up. Creditio adds all three directly on top of native B2B: server-side checkout enforcement, real AR aging, and automated dunning sequences, in English, Turkish and Estonian. Now open in beta. Jul 10, 2026 · 5 min read Read article →
Product Checkout Rescue Is Live: Fixing Shopify's August 26 Checkout Script Deadline On August 26, 2026, Shopify removes Additional Scripts and order-status ScriptTags from every non-Plus store — silently breaking any tracking pixel or affiliate snippet pasted in there over the years. Checkout Rescue scans for free, classifies what it finds against 16 known patterns, and turns the fixable ones into working, often auto-installed web pixel code for a one-time $49. Now open in beta. Jul 10, 2026 · 5 min read Read article →
Product CanopyProof Is Live: EUDR Compliance for the Small Importer The EU Deforestation Regulation makes coffee, cocoa and wood importers prove their goods came from deforestation-free land — with plot coordinates, real risk screening, and a due diligence statement filed to EU TRACES. CanopyProof runs the whole job as a guided workflow: magic-link plot collection, real Whisp satellite screening, and a live TRACES V3 connection. Now open in beta. Jul 9, 2026 · 7 min read Read article →
Product Vatlio: The OSS/IOSS VAT Summary Your Accountant Files in Five Minutes When Taxdoo left VAT compliance in April 2026, small EU e-commerce sellers lost the tool that turned multi-channel sales into an OSS/IOSS return — and cheap replacements weren't there. Vatlio merges Shopify, Etsy, eBay and WooCommerce sales into a country-by-country summary, converts at official ECB rates, validates VAT, and exports Germany's BOP format. It produces the summary — never the filing. Jul 9, 2026 · 6 min read Read article →
Product Restockio: A Simple Purchase-Order App for Merchants Leaving Stocky Shopify shuts down Stocky on 31 August 2026, and its supplier and purchase-order history can't be exported by any rival. Restockio is the focused replacement: a forgiving CSV importer to get your data out of Stocky, purchase orders with a real receiving lifecycle, and reorder alerts that turn straight into a pre-filled PO. Here is what it does and how we built it. Jul 9, 2026 · 6 min read Read article →
Product Approval Flows for Filament: The Human-Approval Layer Filament Never Shipped Every Filament admin panel eventually needs a human to approve something before it happens — a purchase order, a refund, a price change — and out of the box there is no way to model it. Approval Flows for Filament adds configurable multi-step approval chains, a per-user inbox, delegation and escalation, in pure PHP/Livewire. Here is what it does and how we built it. Jul 9, 2026 · 7 min read Read article →
Product PrivaScan: Catching Trackers That Fire Before Consent (KVKK & GDPR) Most real KVKK and GDPR exposure isn't a missing cookie banner — it's the analytics tag, ad pixel, and tag manager already sending data before a visitor ever clicks "Accept." PrivaScan loads your site in a real browser, records every tracker and cross-border transfer firing pre-consent, and turns it into an evidence-based, developer-actionable report — never a compliance verdict. Here is how we built it. Jul 4, 2026 · 7 min read Read article →
Product A11yProof: WCAG 2.2 AA Accessibility Scanning You Can Trust The European Accessibility Act made accessibility a requirement, not a nice-to-have — but most teams still treat it as a one-time checkbox, then drift. A11yProof is built on the opposite premise: a real-browser WCAG 2.2 AA scan powered by axe-core, severity-ranked and actionable, honest about the ~30–40% automated tools can catch, and kept current with continuous monitoring and a public trust badge. Here is how we built it. Jul 2, 2026 · 7 min read Read article →
Product TCSR: Verifiable Cybersecurity Reports, Aligned to the Standards the World Trusts TCSR is built on the opposite of the "we take security seriously" footer line: ownership-gated scanning, an in-house 15-module engine across three depths, tamper-evident AI-authored reports, and an assessment aligned with the recognised global standards — NIST SP 800-115, OWASP, ISO/IEC 27001:2022, NIST CSF 2.0, CIS Controls, PCI DSS, SOC 2, GDPR and KVKK. Alignment, not certification — and we explain the difference. Jun 23, 2026 · 9 min read Read article →
Product RiVo: Building an AI Co-Pilot for Motorcyclists Long rides are equal parts freedom and monotony — and the tech meant to help (intercoms, phone-mounted navigation) often makes things noisier, not safer. RiVo is our answer: an offline-first AI riding companion that talks, navigates, and keeps a group connected even where the cellular network gives up. Jun 14, 2026 · 7 min read Read article →
Product FinAI: An Investment Platform Built to Make Users Money — Not Sell Subscriptions Most investment apps profit whether you win or lose. FinAI is built on the opposite premise: education first, every signal verified by an adversarial AI panel, every recommendation written to a tamper-proof ledger, and realistic backtests that include the taxes nobody else models. Here is how we built a glass-box decision-support platform for Turkish investors. Jun 12, 2026 · 9 min read Read article →
Research The Evolution of Cryptocurrencies: From the Dream of Freedom to the Grip of Digital Surveillance Born out of the 2008 financial crisis, Bitcoin promised freedom from centralized control. Today, the crypto ecosystem stands trapped between the promise of individual autonomy and the realities of digital surveillance — and a new research initiative is asking whether true anonymity can survive at all. May 19, 2026 · 8 min read Read article →
Product Fit: Building an AI Health App That Knows When to Call a Human Coach Most people juggle five different health apps and still feel lost. Fit is our attempt to consolidate nutrition, fitness, sleep, stress, cycle tracking, and human coaching into one place — powered by Gemini, privacy-first, and honest about what AI can and cannot do. May 17, 2026 · 9 min read Read article →
Engineering VoxSim: A Political Simulation Platform for Turkey, Built on Echo Chambers and Historical Calibration Before a policy is announced, a campaign message goes out, or a regulation is published — VoxSim shows how twelve calibrated political clusters across Turkey would react. Built on a live echo chamber pipeline, 50+ historical backtests, and Gemini-powered parallel simulation, it's a decision-support tool with a verifiable accuracy score behind every prediction. May 16, 2026 · 9 min read Read article →
Engineering Earthquake AI: Predicting Seismic Risk for Turkey With Machine Learning We built a machine learning model that estimates earthquake probability by magnitude band for 10 regions across Turkey and surrounding seismic zones — and benchmarked it against global seismic models. Mar 15, 2026 · 7 min read Read article →
Product Vendio Is Live: A Sales Platform Built for Wholesale and Import Businesses Standard CRM tools weren't designed for companies managing trade partners, dealers, and import pipelines. Vendio was. Here's what we built and why. Feb 18, 2026 · 4 min read Read article →
Engineering TensorPanel: Self-Hosted AI Infrastructure Management With a Laravel Control Plane and Go Agent TensorPanel lets teams deploy open-source LLMs on their own GPU servers — with one-click model deployment, fine-tuning, an OpenAI-compatible API proxy, and a Go agent that runs on the GPU server itself. Here's how the architecture works. Jan 22, 2026 · 8 min read Read article →
Product PitBox: One Platform for Automotive Workshops and Showrooms Service workshops and car showrooms run completely different operations — but they share the same data. PitBox brings ERP, CRM, and e-commerce under one roof, with a Flutter mobile app, OCR document automation, and Turkey-specific integrations built in. Nov 20, 2025 · 5 min read Read article →
Product Tourismio: Digitising the Booking Operations Tourism Companies Still Run on Paper Tour operators manage complex, multi-variable bookings — vehicles, guides, capacity, dates, and customer details — across systems that don't talk to each other. Tourismio replaces that with a single platform for web and mobile. Jun 18, 2025 · 5 min read Read article →
Engineering Contentio: A Domain-Based Multi-Tenant CMS Where Each Customer Gets Their Own Site Contentio gives each customer their own domain, their own content, and their own branding — running on shared infrastructure. The architecture that makes this possible without per-customer deployments is the interesting part. May 14, 2025 · 6 min read Read article →
Product Contestio: How Three Event Projects Became One Platform Between 2022 and 2024, we built contest and event management systems for three different clients. Each project had the same requirements. That repetition told us something important. Mar 10, 2025 · 7 min read Read article →
Engineering MOSA: Building a Mesh Communication Ecosystem Without Internet Infrastructure MOSA is a military-grade, offline-first secure communication ecosystem built for environments with no internet infrastructure — spanning a Flutter mobile app, custom BLE/LoRa gateway hardware, and a zero-knowledge PHP internet gateway. Nov 12, 2024 · 7 min read Read article →
Engineering Accessio: VPN as a Service, Built on SoftEther Most VPN services are black boxes. Accessio is built on SoftEther — open-source, protocol-flexible, and deployable on your own infrastructure. A Laravel + Go architecture provisions accounts, manages subscriptions, and generates client configs automatically. Oct 8, 2024 · 5 min read Read article →
Engineering Relativo: Building a Three-Tier Multi-Tenant CRM/ERP From First Principles Most CRM tools are built for one kind of user. Relativo is built for three: the platform, the vendor companies on it, and their customers. Here's how that three-tier architecture works and why we designed it that way. Sep 18, 2024 · 7 min read Read article →
Company Why We Build Vertical SaaS Instead of General-Purpose Tools Talivio has 14 products instead of one platform. This isn't an accident or a failure to focus — it's a deliberate architectural decision rooted in how software actually gets used. Aug 22, 2024 · 5 min read Read article →
Product Mailio: Email Hosting as a Service, Built on Mailcow Running email infrastructure is hard. Mailcow makes it possible to self-host. Mailio wraps Mailcow with a billing layer, a self-service UI, and automated provisioning — so any managed service provider can offer email hosting without touching server configuration. Jul 22, 2024 · 5 min read Read article →
Company Why Talivio Technology Incorporated in Estonia When we decided to build a European SaaS portfolio, the answer for where to incorporate was straightforward: Estonia. Here's why three Turkish developers chose Tallinn as their legal home. Jun 10, 2024 · 4 min read Read article →
Product Building Delivio: How a Real Client Problem Became a SaaS Product In early 2024, we built a courier management system for a Turkish distribution company. Two months later, we had the blueprint for Delivio. This is that story. Apr 8, 2024 · 6 min read Read article →
Company Why Talivio Technology OÜ Was Founded in Estonia When we decided to build a European SaaS portfolio, the answer for where to incorporate was straightforward: Estonia. Here's why three Turkish developers chose Tallinn as their legal home. Mar 15, 2024 · 4 min read Read article →

Stay Updated with Our Newsletter

Get the latest updates on our new products and services.

By subscribing you accept our Privacy Policy.