Featured · Security basics
How to Secure a Vibe Coded App: The Complete Security Checklist
A plain-English security checklist for vibe coded apps. Find leaked keys, open databases, and the other mistakes AI tools make, with copy-paste fix prompts.
Resources
Learn
Plain-English guides to shipping AI-built code safely. No security background required.
Databases
Lovable Security Checklist: Lock Down Your App in an Afternoon
A step-by-step Lovable security checklist: check your Supabase Row Level Security, find leaked keys, and confirm your auth setup, with a copy-paste RLS fix.
Security basics
Is My Cursor App Secure? A Checklist for the App, Not the Editor
Most Cursor security advice is about your source code privacy. This checklist is about the app Cursor built: keys, auth, inputs, with Cursor-ready fix prompts.
Databases
Supabase RLS Not Enabled? Row Level Security for AI-Built Apps
How Supabase tables end up without RLS in AI-built apps, how to test your policies with the anon key, and the three policy shapes almost every app needs.
Secrets
Leaked an API Key on GitHub? Do These Steps, in This Order
Accidentally pushed an API key to GitHub? Rotate it at the provider first, then clean your git history, then stop the next one. Calm, ordered, tested steps.
Scanning
Scan a GitHub Repo for Vulnerabilities Free: What a Real Scan Covers
Scan a GitHub repo for vulnerabilities free: secrets in git history, injection flaws, risky dependencies, and exposed config. What each check takes by hand.
Ship it with confidence.
Your first scan takes about two minutes. Your first fix might too.