@emanueldev4 · X

Building Preflight a simple way to catch issues before your website goes live.

@GlenLouis08 · X

lets connect! building this

@hexorasec · X

Paid Hexora accounts now get PDF security reports. Every finding with evidence, CVSS scores, remediation steps, and AI fix prompts, in a report you can hand to a client or keep for compliance. Live for Starter, Pro, and Max. #buildinpublic #vibecoding

u/Still_Amphibian545 · Reddit

almost launched a side project with my api keys sitting in the repo (a week free gpt 5.6 on us) was about a day from launching a small project when i noticed my openai key was just sitting in a committed file. it had been there for weeks. no idea how i missed it. made me wonder what else was wrong that i couldn't see. turns out for vibecoded stuff it's usually the same handful of things. secrets in the repo, endpoints with no auth, a database with no access rules, no limit on the ex

@RElharrak39428 · X

@Ninjafromqueens · X

Hello! I am the founder and owner of Audit your smart contracts before deploying.

@TurvSec · X

@guhanvenkaty · X

Tako's free preview is live: Paste your URL, get a security verdict on your vibe-coded app in 60s. Not an AI wrapper: it fires real requests and PROVES exposure, pulling data from your open DB with no login. Scanning puts you on the early-access waitlist.

u/Background-Bed-8866 · Reddit

I built an AI back office that handles startup operations while I focus on shipping I build an AI back office for founders because I was tired of juggling 15 different SaaS tools for blogging, SEO, docs, analytics, customer support, and launches. Today I finally launched on Product Hunt. Happy to answer anything about the architecture, pricing, or why I chose specialized agents instead of one general assistant. try it out: Astrodesk submitted by /u/Background-Bed-8866 to r

@nathanghart · X

Submitting for approval. I built a free tool for anyone about to ship a vibecoded app. It scans your repo for what bites you in prod (leaked keys, no auth, no error handling). I ran it on 1,868 AI-built apps and even caught my own scanner being ~42% wrong.

u/uwais_ish · Reddit

Three weeks to build an AI security scanner. The scanner was the easy part. Shipped RedFlag this month. Breakdown of where the time actually went, because it was nothing like I estimated. Stack: Next.js 16, Auth.js v5, MongoDB, Stripe, OpenAI. Deployed on Vercel. What I thought would be hard: getting an LLM to find real vulnerabilities. What was actually hard: getting it to stop finding fake ones. First working version flagged 200+ issues on a clean repo. Every one plausible, most of th

@StandaraAI · X