@YarrowCloud · X

Vibe-coded app with a hardcoded Stripe key and no RLS. Yarrow rotates it, logs it, files the audit — founder still tweeting 'just shipped.'

u/uwais_ish · Reddit

Three weeks to build an AI security scanner. The scanner was the easy part. Shipped RedFlag this month. Breakdown of where the time actually went, because it was nothing like I estimated. Stack: Next.js 16, Auth.js v5, MongoDB, Stripe, OpenAI. Deployed on Vercel. What I thought would be hard: getting an LLM to find real vulnerabilities. What was actually hard: getting it to stop finding fake ones. First working version flagged 200+ issues on a clean repo. Every one plausible, most of th

@reruneio · X

u/dumbfoundded · Reddit

Ito, AI Code Review that Runs Code I've been using AI code review tools but none of them actually run code so I built one: https://www.ito.ai/ The way it works is that it uses microVMs to spin up your environment with all of the services running. Then a bunch of AI agents go and test the application to collect runtime evidence. The result is you get test cases along with evidence about whether or not the test cases pass or fail. The runtime evidence can be videos, request/response curls, db

shayannadeem321 · HN

BatchEdits – Batch AI video editor to edit content in volume

@GorodkovVi85373 · X

- load testing made easy even without enginnering team. Faster, cheaper, distributional

@guhanvenkaty · X

Tako's free preview is live: Paste your URL, get a security verdict on your vibe-coded app in 60s. Not an AI wrapper: it fires real requests and PROVES exposure, pulling data from your open DB with no login. Scanning puts you on the early-access waitlist.

@GlenLouis08 · X

lets connect! building this

@supezen · X

😂我做了一个截然相反的产品，把「过程」留给 AI，把「结果」留给自己