@radimhfer · X

i'm founder of Stashbase, designed to help builders

Getchowned · HN

The AI Lethal Trifecta

Autumn-27 · GitHub

ARTEX AI 自主渗透测试系统

@guhanvenkaty · X

Tako's free preview is live: Paste your URL, get a security verdict on your vibe-coded app in 60s. Not an AI wrapper: it fires real requests and PROVES exposure, pulling data from your open DB with no login. Scanning puts you on the early-access waitlist.

@kkworld · X

Introducing SecureEnv. A secure, developer-first platform for managing environment variables and secrets. Simple. Secure. Built for developers. 🌐 #SecureEnv #BuildInPublic #Programming

@MixRoute_ai · X

u/Still_Amphibian545 · Reddit

almost launched a side project with my api keys sitting in the repo (a week free gpt 5.6 on us) was about a day from launching a small project when i noticed my openai key was just sitting in a committed file. it had been there for weeks. no idea how i missed it. made me wonder what else was wrong that i couldn't see. turns out for vibecoded stuff it's usually the same handful of things. secrets in the repo, endpoints with no auth, a database with no access rules, no limit on the ex

@oldagencydev · X

Is this still an open offer?😂I'm launching and trying to get it out there. Free no-signup security scans of any URL to catch everything including vibe-coded app issues. Then paid plans for everything up to enterprise! Already using at my other company!

@ohdearkk · X

@AICybershieldTe · X

Most sites are one scan away from a very bad day. Scanned ~100 this week — exposed .env files, missing security headers, cookies set before consent (a real GDPR fine). Security + privacy + accessibility, one 90s check: #vibecoding #buildinpublic

minpym · HN

Flashpaper – Self-destructing secret sharing with no database

iamavalex · HN

Artifacted – private URLs for the small tools your AI builds