What it is
Manage Your Means helps individuals and families see where their money goes, plan a realistic budget and stay ahead of their bills. It's live at ManageYourMeans.com, and companion apps for Android and iPhone are available from Google Play and the App Store.
- Use it anywhere. The web app runs in any browser and installs as a progressive web app. The mobile apps add a biometric lock, an encrypted offline copy and on-device bill reminders.
- Stay ahead of bills. Bill alerts and an optional weekly digest email keep the month on track.
- Share a household. Invite a partner to view or edit, with every shared change audited.
- Try before signing up. A demo mode with sample households needs no account.
- Own your data. Export everything at any time, or delete your account and every record with it.
It's private by design: no bank credentials, no data aggregators, no advertising and no third-party analytics.
How it's built
Manage Your Means runs on the same Azure foundation Nirgrum Fulgur designs for clients, at production scale.
- Azure App Service. An ASP.NET Core 10 API and a Blazor WebAssembly front end on a Premium v3 plan, with production and staging slots. Every release is smoke-tested on staging, then swapped in with warm-up, and rolled back by swapping again.
- Microsoft Entra ID. Single-tenant app registrations handle Microsoft sign-in (OpenID Connect) and a delegated API that a Microsoft 365 Copilot agent calls over MCP. Each slot has its own managed identity, so no credentials live in code or configuration.
- Customer identity. Passkeys (WebAuthn/FIDO2), authenticator-app two-factor, lockout that never reveals whether an account exists, and passwords checked against known breaches. Only a five-character hash prefix leaves the server.
- Azure SQL Database and Key Vault. Data is encrypted at rest and in transit. Sensitive columns are also encrypted at the application level, under a key ring wrapped by a Key Vault key with role-based access per slot.
- Observability. OpenTelemetry flows to Application Insights and Log Analytics. Azure Monitor alerts and availability tests from five locations are declared as code in Bicep.
- Azure DevOps. Every change passes a NuGet vulnerability audit, warnings-as-errors with .NET security analyzers, about 4,300 automated tests, coverage floors and an accessibility gate before a blue/green deployment.
- Email. Mail goes through Microsoft Graph and Exchange Online, with SPF, DKIM, DMARC at
p=rejectand MTA-STS in enforce mode.
The diagrams below show every service and how they connect.
What it proves
Manage Your Means is a working, public example of a secure, cost-conscious Azure platform built and run by a small team. Identity is anchored in Entra ID, there are no stored secrets, data is encrypted end to end, and delivery is fully automated. The same patterns scale down to a single internal tool or up to your own customer-facing product.
