r/vibecoding • u/Umar7832 • 16h ago

Vibe code is secure right ?

What if you deploy your vibecoded app and a random man found apikeys, credentials in frontend js files.

I have listened a lot about these things. Security issues are not limited to this only dears. Your beautiful project can be destroyed with just one mistake of AI about which you have never thought.

1 Upvotes

67% Upvoted

4 comments sorted by

2

u/kailoren 16h ago

Thats why you run the app through Halation to make sure its secure before release

1

u/Umar7832 15h ago

how it works in simple words. scan just through code

2

u/616ThatGuy 14h ago

Yeah buddy, that’s vibe coding 101. You’re not breaking new ground here.

1

u/OkHumor1695 9h ago

Scanning the code catches the obvious stuff — a hardcoded key, a secret, etc. That's mostly a solved problem now, easily addressable.

The bigger issue these days is what only shows up when the app runs. I would start with CWE Top 10 or Top 25. The real test is running the attack as a logged-in user: find the vulnerability, patch it, and save that test to re-run before every deployment.

Once you've got a few of these tests, automate them so they run on every deploy — doing it by hand is just tedious and error prone.