📰 Dev.to · SystAgProject

7 articles · Updated every 3 hours · View all reads

All Articles 72,754 Blog Posts 101,132 Tech Tutorials 17,698 Research Papers 15,635 News 12,954 ⚡ AI Lessons

I Audited 21 Public Vibe-Coded Apps in 48 Hours. Here Are the 5 Patterns That Keep Showing Up.

Dev.to · SystAgProject 1mo ago

I Audited 21 Public Vibe-Coded Apps in 48 Hours. Here Are the 5 Patterns That Keep Showing Up.

21 public apps built on Lovable, Bolt, v0, Cursor, Replit, Windsurf — scanned with the same LLM-powered security auditor, severity-graded, aggregated. 162 real

I Ran My Own Security Audit Tool Against My Own Codebase. It Caught a Bug I'd Shipped to Main.

Dev.to · SystAgProject 1mo ago

I Ran My Own Security Audit Tool Against My Own Codebase. It Caught a Bug I'd Shipped to Main.

Dogfooding your own security tool is the most honest unit test there is. I ran VibeScan against the codebase that built VibeScan. It caught a real token leak I

Your Supabase Edge Function Probably Has No Auth. 8 Out of 9 Vibe-Coded Apps I Scanned This Week Didn't.

Dev.to · SystAgProject 1mo ago

Your Supabase Edge Function Probably Has No Auth. 8 Out of 9 Vibe-Coded Apps I Scanned This Week Didn't.

Edge Functions run in the cloud at a public URL. Anyone with the URL can invoke them unless you explicitly verify the caller. Most AI-scaffolded apps ship with

I Audited 9 Vibe-Coded Apps in 24 Hours. Here Are the 5 Patterns That Show Up Every Single Time.

Dev.to · SystAgProject 1mo ago

I Audited 9 Vibe-Coded Apps in 24 Hours. Here Are the 5 Patterns That Show Up Every Single Time.

Aggregate findings across 9 AI-generated SaaS audits ran yesterday. 145 security issues, 9 critical, 75 high. Five patterns recur in basically every codebase —

Your First Supabase RLS Policy, Without Exposing Your Whole Database

Dev.to · SystAgProject 1mo ago

Your First Supabase RLS Policy, Without Exposing Your Whole Database

A 10-minute worked example of Row Level Security in Supabase. What to write on day one, the three mistakes I keep seeing, and how to verify your policy actually

The 12 Security Issues I Keep Finding in Vibe-Coded Apps (Lovable, Bolt, v0)

Dev.to · SystAgProject 1mo ago

The 12 Security Issues I Keep Finding in Vibe-Coded Apps (Lovable, Bolt, v0)

After running VibeScan against a handful of public AI-generated apps, the same dozen issues kept showing up. Here they are, ranked by how often I see them, with

I ran a security audit on my own Python codebase with an LLM for $0.90. Here is what it found.

Dev.to · SystAgProject 1mo ago

I ran a security audit on my own Python codebase with an LLM for $0.90. Here is what it found.

Last week I shipped a small product called VibeScan — a 49-dollar PDF security audit for apps built...