@BigmanAkhil · X

Prevent marketing from going to waste

@hexorasec · X

Paid Hexora accounts now get PDF security reports. Every finding with evidence, CVSS scores, remediation steps, and AI fix prompts, in a report you can hand to a client or keep for compliance. Live for Starter, Pro, and Max. #buildinpublic #vibecoding

u/freestyle_gonzo · Reddit

Vibe coding made building fast. It didn't make understanding easy. Something changed in the last year. Vibe coding (or agentic engineering if you ask some) made writing an app fast. Week-to-weekend fast. More people are building software than ever before, and I think that's a genuinely good thing. But fast building creates a new bottleneck. Writing code is no longer the hard part. Understanding what you built and its nuances is. A huge share of people shipping right now have never analyzed

@djdeepakjha · X

AI can build your startup in days. But who checks the security? Public configs. Weak APIs. Exposed secrets. If AI built your app, scan it before someone else does. 🔒 StackSecured — security assessment #CyberSecurity #VibeCoding #AppSecurity

u/uwais_ish · Reddit

Three weeks to build an AI security scanner. The scanner was the easy part. Shipped RedFlag this month. Breakdown of where the time actually went, because it was nothing like I estimated. Stack: Next.js 16, Auth.js v5, MongoDB, Stripe, OpenAI. Deployed on Vercel. What I thought would be hard: getting an LLM to find real vulnerabilities. What was actually hard: getting it to stop finding fake ones. First working version flagged 200+ issues on a clean repo. Every one plausible, most of th

@usesecurecode · X

Free Starter is $0 forever. 3 scan credits 1 free Attacker Mode run (20 credits) Real-time SAST Dependency checking Fix previews Signing up is free and gives you scans to try it out. free&utm_content=06_start-free#pricing #vibecoding

Nqspq

been building a security scanner for vibe-coded apps — it catches leaked API keys, open databases, logins you can bypass. tested it on a repo made for testing scanners. it caught everything — report below free if you want to check yours:

@GetPrbl · X

aisinghal

u/Delicious-Action-351 · Reddit

I failed 4 times and still made an app to make your code more secure. I made an webapp to make your vibecoded app secure. Today, SaaS entrepreneurs ship fast and don’t check for security, at the end they get hacked and it’ll cost them a lot of money. I decided to solve this issue. Netherite is an AI Security Specialist, you connect Github and choose repo to run security scan. It scans your whole repo in minutes and hands you the professional report and fix prompt for your ai agent. You ca

u/Still_Amphibian545 · Reddit

almost launched a side project with my api keys sitting in the repo (a week free gpt 5.6 on us) was about a day from launching a small project when i noticed my openai key was just sitting in a committed file. it had been there for weeks. no idea how i missed it. made me wonder what else was wrong that i couldn't see. turns out for vibecoded stuff it's usually the same handful of things. secrets in the repo, endpoints with no auth, a database with no access rules, no limit on the ex

screm · HN

Product analytics (and evals) for agent sessions on your MCP