Vibe Coding
Prompt your way to a secret leak: how AI tools commit your .env
An AI assistant does what you ask, including the parts you did not think to forbid. That is how a .env full of keys ends up committed or served.
Tag
#vibe-coding
Vibe Coding
AI wrote my backend — so who owns the security?
When an AI assistant writes most of your backend, the responsibility question gets blurry. The answer is simpler than it feels — and it is on you, in a good way.
Security Headers
We scanned 5 popular security scanners — and every one still leaked something
We scanned 5 popular security scanners with our own engine. None had a critical flaw — but every one leaked something Medium. Here is what, and why it matters.
Vibe Coding
The 60-second pre-launch security checklist
You are about to deploy. Before you do, run down this short list — the handful of things that get found and exploited first on a fresh site.
Vibe Coding
I shipped an app with AI in a weekend — here is what the scanner found
We built a small app the vibe-coding way, deployed it, then scanned it. Here is the honest list of what came back, and what each finding actually meant.
Vibe Coding
Security for vibe coders: the 7 things AI-generated apps leak first
AI writes the code that solves your prompt — not the code that keeps secrets. Here are the 7 things vibe-coded apps leak first, and how to catch them before bots do.