@AdiKodez · X

u/Still_Amphibian545 · Reddit

almost launched a side project with my api keys sitting in the repo (a week free gpt 5.6 on us) was about a day from launching a small project when i noticed my openai key was just sitting in a committed file. it had been there for weeks. no idea how i missed it. made me wonder what else was wrong that i couldn't see. turns out for vibecoded stuff it's usually the same handful of things. secrets in the repo, endpoints with no auth, a database with no access rules, no limit on the ex

@oldagencydev · X

Is this still an open offer?😂I'm launching and trying to get it out there. Free no-signup security scans of any URL to catch everything including vibe-coded app issues. Then paid plans for everything up to enterprise! Already using at my other company!

u/bob__io · Reddit

What we learned from trying to turn vibe-coded prototypes into production SaaS applications Founder here. While developing MCPBackend, we noticed a major difference between generating a convincing application demo and building a maintainable SaaS product. AI coding tools are increasingly capable of generating interfaces, routes and even initial application logic. But a production application still needs: a reliable data model authentication and authorization backend validation