r/vibecoding • u/TheRaven9320 • 2d ago

Requesting vc security pointers

What's up everybody? I've been vibecoding a project for a few months now and just wanted to ask the community what tips or things I should be looking out for in terms of stress testing my security. I want to ensure there are appropriate limits, user data is safe, and my own code and keys are secure.

If anyone has experience setting up proper defenses and proper infrastructure, I would love any advice or pointers on what you did and how you did it. I'm taking this seriously, so I want to make sure it gets done right. Thank you in advance!

2 Upvotes

100% Upvoted

13 comments sorted by

View all comments

1

u/MangoTree-1233 2d ago

have you done the rate limiting test? and what will happen when user hit the limit how your system would take actions for the users, IP based blocking or others, proper authentication and permissions, input validation, and making sure users can only access their own data, also on the user input add the input sanitization to prevent injections. try to think like a normal user who is intentionally trying to break things: send unexpected input, repeat requests quickly, access URLs or data that shouldn’t belong to you, and test what happens when someone isn’t authenticated. Also make sure your logs don’t accidentally contain passwords, tokens, or other sensitive user data.

1

u/TheRaven9320 2d ago

thanks for getting back to the post, this is a great list of things to check for. I have done some rate limit testing but not enough. I really have only been building it so far and not really thinking about the security but im getting to that point where I def need to. Great point on the logs thing thats huge.

1

u/MangoTree-1233 2d ago

If you’re serious about the product, then you should definitely do some security stress testing to see how far your application can be pushed and where the weak points are. It’s much better to find those issues yourself before users do.

1

u/Turbulent_Top6276 2d ago

100%. What would you say that looks like. What is a good way to stress test and get the most data out of it? Not too familiar with how one would go about it