Security, without the jargon.

For founders who build with AI, whichever tool writes the code, and would rather not learn security the hard way. Real incidents, the research behind them, and what to check this week.

Topics:#vibe-coding #api-keys #row-level-security #supabase #data-breach #lovable #access-control #ai-generated-code #bolt #cursor #cve #file-storage #firebase #frontend

1 article tagged #frontend

Clear filters

Guides29 Sept 2026

Is your API key sitting in your website's code? How to check in five minutes

AI tools sometimes put a paid API key where the browser can read it, because it's the fastest way to make a feature work. Anyone can then copy it and use it on your bill. Here's how to look for one without reading code.

4 min read

Launching soon?

The free pre-launch checklist has the twenty checks we would run first, in the order we would run them. No email, no account.

Open the checklist RSS

Security, without the jargon.

Results

Is your API key sitting in your website's code? How to check in five minutes

Launching soon?