Skip to content

Tag

Vibe Coding & Security — Page 2

Tutorials, guides, and deep dives on security for AI-assisted development.

Showing 25–48 of 70 articles

ship·advanced·11 min

DIY Penetration Testing for Your AI-Built Web Application

DIY penetration testing for AI-built apps. Find security vulnerabilities before attackers do using OWASP ZAP, Burp Suite, and a structured testing checklist.

Read
build·intermediate·11 min

Rate Limiting and API Throttling for Your AI-Built App

Implement rate limiting and API throttling in your AI-built app. Token bucket, sliding window, and Upstash Redis patterns that protect against abuse and costs.

Read
ship·intermediate·10 min

The Replit SaaStr Database Disaster and Its Key Lessons

The Replit SaaStr database disaster explained. How an AI agent deleted production data, faked replacements, and the guardrails that would have prevented it.

Read
build·intermediate·10 min

Role-Based Access Control for Your AI-Built Application

Implement role-based access control in AI-built apps. Practical RBAC guide with Supabase RLS and Next.js middleware for founders and developers building apps.

Read
ship·intermediate·12 min

Security Auditing Tools for AI-Generated Code Compared

Compare security auditing tools for AI-generated code. Snyk, Semgrep, npm audit, and more reviewed for finding vulnerabilities before they reach production.

Read
ship·advanced·11 min

SOC 2 Considerations When Your Product Is Built With AI Tools

SOC 2 compliance for AI-built products. What startups need to know about the five trust criteria, AI-specific challenges, and practical steps to get certified.

Read
build·intermediate·10 min

User Authentication From Scratch With Email and Password

Build user authentication from scratch with email and password. Step-by-step guide using Supabase Auth or NextAuth with secure password handling and sessions.

Read
ship·advanced·12 min

WebSocket Security for Authentication and Message Validation

Secure WebSocket connections with proper authentication and message validation. Prevent injection, unauthorized access, and the gaps AI code commonly leaves open.

Read
ship·intermediate·11 min

The AI Can't Delete This Database Configuration Checklist

Configure your database so AI agents cannot delete data. Seven settings covering RLS policies, read-only roles, deletion triggers, and automated backups.

Read
ship·beginner·10 min

How AI Accidentally Commits Your API Keys and Secrets

AI coding tools regularly expose API keys and secrets in your code. Learn how it happens, how to check your repos, and how to rotate compromised keys.

Read
ship·intermediate·12 min

Authentication Security for Every AI-Built App in 2026

AI tools generate insecure authentication patterns by default. Learn how passwords, sessions, and tokens should work and what to fix in your codebase.

Read
ship·intermediate·10 min

Authorization Patterns Every Vibe Coder Must Implement

AI tools build apps where every user can see everything. Learn authorization patterns that control access properly, from RBAC to row-level policies.

Read
ship·intermediate·10 min

Cookie Security Flags That Protect Your Users from Common Attacks

Cookie security flags explained for vibe coders. Learn SameSite, HttpOnly, and Secure attributes with copy-paste configs for Next.js, Express, and Supabase.

Read
ship·intermediate·11 min

Cross-Site Scripting in AI Code and How to Prevent It

AI-generated code is 2.74x more likely to have XSS vulnerabilities than human-written code. Learn why AI creates them and how to fix every pattern.

Read
ship·intermediate·10 min

CSRF Protection Explained and How to Implement It in Your App

CSRF protection explained for vibe coders. Learn what cross-site request forgery is, why AI skips it, and how to implement CSRF tokens in Next.js and Express.

Read
ship·intermediate·11 min

Database Encryption at Rest and in Transit for Vibe-Coded Apps

Database encryption explained for vibe coders. Learn what Supabase, Neon, and PlanetScale encrypt automatically and what you must configure for full protection.

Read
ship·intermediate·10 min

Environment Variables in Production and How to Manage Them Safely

Environment variables in production explained for vibe coders. Learn to manage secrets safely across Vercel, Railway, and Cloudflare without exposing API keys.

Read
ship·intermediate·11 min

File Upload Security That Prevents Malicious Uploads in Your App

Secure file uploads in your vibe-coded app. Learn file type validation, size limits, malware prevention, and safe storage patterns that AI tools always skip.

Read
ship·intermediate·10 min

Input Validation and Why You Should Never Trust User Data

Input validation explained for vibe coders. Learn why AI skips validation, how to use Zod for runtime checks, and the patterns that prevent injection attacks.

Read
ship·intermediate·11 min

Payment Security and PCI Compliance for Vibe-Coded Apps

PCI compliance for vibe-coded apps explained. Learn what Stripe handles, what you must do yourself, and the payment security mistakes AI tools always make.

Read
pulse·intermediate·11 min

Post-Mortem of the Lovable CVE That Exposed 170+ Apps

The Lovable CVE-2025-48757 exposed 170+ production apps due to missing Row Level Security. A detailed breakdown of what happened and how to prevent it.

Read
pulse·intermediate·10 min

Post-Mortem of Moltbook and the 1.5 Million Token Leak

The Moltbook leak exposed 1.5M auth tokens and 35K emails from an app built entirely with AI. A breakdown of what went wrong and what every builder must learn.

Read
pulse·intermediate·12 min

Post-Mortem of the Tea App Leak That Exposed 72K Images

The Tea App leak exposed 72K images and 1.1M private messages through an open Firebase bucket. A detailed breakdown of what went wrong and how to prevent it.

Read
ship·intermediate·11 min

How to Protect Your Database From AI Agents That Can Delete It

Protect your database from AI agents. Learn read-only connections, sandboxed environments, backup strategies, and permission boundaries that prevent data loss.

Read