Security, without the jargon.

For founders who build with AI, whichever tool writes the code, and would rather not learn security the hard way. Real incidents, the research behind them, and what to check this week.

Topics:#vibe-coding #row-level-security #supabase #api-keys #data-breach #lovable #access-control #ai-generated-code #bolt #cursor #cve #file-storage #firebase #gdpr

1 article tagged #ai-generated-code

Clear filters

Research23 Sept 2026

AI picks the insecure option almost half the time, and newer models haven't fixed it

Veracode gave more than 150 AI models coding tasks that could be done safely or unsafely. They chose the unsafe way about 45% of the time, and in 2026 that number still hasn't moved. Here's what the tests found, without the jargon.

3 min read

Launching soon?

The free pre-launch checklist has the twenty checks we would run first, in the order we would run them. No email, no account.

Open the checklist RSS

Security, without the jargon.

Results

AI picks the insecure option almost half the time, and newer models haven't fixed it

Launching soon?