What actually goes wrong in vibe-coded apps
Independent studies across thousands of deployed applications keep finding the same handful of failures — and they are ordinary web-security mistakes, not exotic AI ones.
The vibe-coder's security checklist
Fourteen checks to run before your AI-built app meets real users — secrets, database permissions, ownership, input, rate limits — each with the research behind it.
From finding to fix: using AI to repair its own code
Why the same AI that helped create vulnerable code can still be useful for repairing it — once a separate security system has found the problem first.
Nothing matches that yet.