Vibe Coding
A security review for AI-generated code: a practical checklist
AI tools get you to a working app fast. They optimise for 'it runs', not 'it is safe to expose'. Here is a short, concrete review to run before you ship.
Tag
#vibe-coding
Vibe Coding
'It works on Vercel': the serverless security myths
Modern hosts make deployment effortless and handle real security for you. The myth is assuming they handle the parts that are still yours.
Vibe Coding
Prompt your way to a secret leak: how AI tools commit your .env
An AI assistant does what you ask, including the parts you did not think to forbid. That is how a .env full of keys ends up committed or served.
Vibe Coding
AI wrote my backend — so who owns the security?
When an AI assistant writes most of your backend, the responsibility question gets blurry. The answer is simpler than it feels — and it is on you, in a good way.
Security Headers
We scanned 5 popular security scanners — and every one still leaked something
We scanned 5 popular security scanners with our own engine. None had a critical flaw — but every one leaked something Medium. Here is what, and why it matters.
Vibe Coding
The 60-second pre-launch security checklist
You are about to deploy. Before you do, run down this short list — the handful of things that get found and exploited first on a fresh site.
Vibe Coding
I shipped an app with AI in a weekend — here is what the scanner found
We built a small app the vibe-coding way, deployed it, then scanned it. Here is the honest list of what came back, and what each finding actually meant.
Vibe Coding
Security for vibe coders: the 7 things AI-generated apps leak first
AI writes the code that solves your prompt — not the code that keeps secrets. Here are the 7 things vibe-coded apps leak first, and how to catch them before bots do.