Nowadays, a secure and resilient SaaS app is a boring SaaS app. We will talk through a reference architecture that is a good fit for most internal and commercial appdev. It is resilient, scalable, cheap, virtually impervious to hackers, and makes old people nervous at first. Most importantly: it is easy to explain to auditors and execs using small words.