Mattias

Building software is no longer the hard part. Building the right thing is. Spawn™ starts with why it should exist and what your customers truly need. Only then do we build, so that every pixel, every word and every action keeps the same promise. That is how a product becomes a brand.

Learn to take an idea all the way to a live app for iOS, Android and web. Find what customers truly need. Design it, build it, secure it and release it.

Get the toolkit to do it again: AI instructions written for your product, step-by-step guides for every stage, and a complete setup on your own computer.

Leave with a working first version of your own idea, and the ability to build the next one without me.

Four weeks, remote, on a real use case from your own business, plus a kick-off two weeks before. Max 4 participants. Everyone builds on their own, from why to live, so nothing is lost between hands. We also work as a group, so everyone learns from every build. No prior experience required: AI does the writing, you make the decisions. Half guided sessions, half hands-on. AI tool licences not included.

Kick-off: two weeks before week 1

• Jobs-to-be-Done: how to find out what your customers want done, how they want to feel, how they want to be seen
• Interview guide: the questions to ask, ready to use
• You book and hold 5 to 8 interviews with your own customers

Week 1: Find the right thing to build

• Why it should exist. A clear why, before a single line of code
• Your interviews, turned into what your customers truly need
• One real use case from your company, chosen because it creates value
• The simplest, cheapest way to solve it. Nothing more
• Brand and communication principles: how every pixel and every word will keep the promise

Week 2: Set up so quality comes built in

• System prompts: instructions that carry your why into everything the AI writes
• Prompt engineering guidelines: how to brief the AI, so you get quality back
• Your computer set up to build for iOS, Android and web
• A design that is safe and ready to grow from day one
• Your cloud, set up automatically. AWS, Google Cloud or Azure, whichever you already use
• Runbooks: step-by-step guides, so quality never depends on memory

Week 3: Build the real product, not a demo

• We build your use case together, from the first line to a working product
• Design to the standard of the giants, usable by everyone
• Every screen, every title, every message checked against the promise
• Every change tested and released automatically, so quality is not left to luck

Week 4: Go live, learn, and run it yourself

• Release, ready for many users
• Measure what your customers actually do, with respect for their privacy and GDPR
• How to decide what to build next, so you keep building the right thing
• You run the method alone. I coach
• A playbook for the next product. Internal or public, small or large

Who am I? I have built products for brands like Volvo Cars, Spotify and ATEA. I still build with the same method every day, as co-founder and CTO of Back to Better, a high-end product studio.

Building software is no longer the hard part. Building the right thing is. Spawn™ Day is a one-day workshop. Your team learns the Spawn™ method on one shared case, and uses it on your own business, step by step.

The case. A gym asks for a booking app. The real job is getting members to show up. We follow one case through all six steps. That is how the method sticks.

The day

• Morning, why: Purpose, Need, Promise. Each step on the case first.
• Afternoon, how and what: Foundation, Build, Learn. On the case: how the promise gets built in, what to build first, and how you know it works.
• Your turn, the last hour: What you build first for your own business, and how you will know it works.

You leave with

• The method: six steps, and the questions to ask before anything gets built.
• Templates: one for every step, ready to use on your own.
• A first draft: purpose, need, promise and a first step, for your own business.

One day. Max 10 participants. No prior experience required. In-house for your team, or an open day with other companies. The full price is deducted from Spawn™ if you book within 60 days.

Who am I? I have built products for brands like Volvo Cars, Spotify and ATEA. I still build with the same method every day, as co-founder and CTO of Back to Better, a high-end product studio.

You give us a company name. Nothing else. For three days we look at your business the way an outsider with bad intentions would, with your written permission. You learn what is exposed, what has already leaked, and what to fix first.

Zero knowledge. We start from nothing: no documentation, no accounts, no walkthrough. The same starting point as a real attacker.

Zero preparation. You keep working. One signed authorisation and one contact person is all we need from you.

Zero jargon. A report management can read and your technicians can work from, the same week.

Day 1: Map. What the outside world can see

Your public footprint: domains, services and systems you may have forgotten

Leaked credentials: staff logins and passwords found in breach data and on the dark web

What your people and suppliers reveal without knowing it

A ranked list of the most likely ways in

Day 2: Breach. How far an outsider gets

We try the most likely ways in, by hand, as far as the agreed rules allow

Leaked logins tested against your own login pages

Social engineering: can your people be talked into opening the door?

Critical finding? You hear about it the same hour

Day 3: Report. What to fix, in what order

Every finding verified and ranked by real business risk

Evidence and steps, so your technicians can reproduce it

Fix list: what to do first, and what can wait

Walkthrough with management and IT

Three full days, done remotely. Fixed price. Report and walkthrough delivered the same week. A retest of fixed critical findings within 30 days is included.

Testing starts only after written authorisation from someone entitled to give it, and stays within the agreed rules. No denial-of-service and no physical intrusion. Social engineering covers only the staff groups you approve and is reported as totals, never by name. A time-boxed test shows what three days can find, not that nothing else exists. Leaked data is handled under a data processing agreement and deleted after delivery.

Who does the work? Mattias Falk. Penetration tester and security architect. I have tested municipalities, energy companies and enterprise platforms since 2019, and spoken at Tech Days Stockholm on current cyber threats.