The vibe-coder’s security blog.
Plain-English guides on the security holes AI coding tools leave in your app, and exactly how to close them before you ship.
23 May 2026
8 Security Holes AI Coding Tools Leave
AI coding tools ship working apps with the same eight security holes again and again. Here's the list: what each one is, why it happens, and the one-line fix.
Read23 May 2026
Is Google Antigravity Code Secure?
Antigravity moves fast across Google Cloud, but it over-scopes IAM and ships unauthenticated Cloud Functions. A security checklist for Antigravity apps before launch.
Read23 May 2026
The Bolt Security Checklist (Before Launch)
Bolt.new gets you from idea to running app fast, but its API routes often accept any origin and trust the client. A practical security checklist for Bolt apps.
Read23 May 2026
How to Find Leaked API Keys in a GitHub Repo
Leaked API keys are the most common security hole in AI-built apps. Here's how to check any public GitHub repo for exposed secrets in two minutes. Free, no signup.
Read23 May 2026
Is Replit-Generated Code Secure?
Replit's Agent ships apps fast, but it leaves secrets outside the Secrets tab and routes without auth. An honest answer plus a security checklist for Replit apps.
Read21 May 2026
Is Cursor-Generated Code Secure?
Cursor writes working code fast, but it leaks keys and skips auth in predictable ways. Here's an honest answer plus a security checklist for Cursor apps.
Read21 May 2026
Lovable + Supabase: 4 Security Pitfalls
Lovable ships fast on Supabase, but its generated RLS policies and auth flows leave predictable gaps. The four Lovable + Supabase security pitfalls to fix before launch.
Read21 May 2026
How to Secure an App You Vibe-Coded
AI-generated code ships fast but leaks in predictable ways. Here are the 8 security holes that hit most vibe-coded apps, and how to close them before launch.
Read21 May 2026
The v0 Security Checklist (Before You Ship)
v0 generates beautiful, wired-up UI, but the server actions behind it often skip auth and validation. A practical security checklist for v0 apps before launch.
Read