Guides
Security guides for vibe-coded apps
Plain-English breakdowns of the issues that show up most often in apps built with Cursor, Bolt, Lovable, and v0 — written for founders, not security engineers.
Supabase
Supabase RLS: the #1 security bug in vibe-coded apps
Your anon key being public is fine. Missing Row Level Security behind it is not. How to check, and how to fix it.
Read the guide API KeysHow to find and fix exposed API keys in your AI-built app
Not every key in your JavaScript bundle is a leak. Exactly which keys are safe, which are critical, and how to fix each.
Read the guide ChecklistThe vibe-coding security checklist
Every issue that shows up most often in Cursor, Bolt, Lovable, and v0 apps — in the order they tend to matter most.
Read the guide