Security guides for vibe-coded apps
Practical, plain-English guides for people building with Lovable, Bolt, Cursor, Replit, v0 and Supabase.
Is my vibe-coded app secure? A checklist
Twelve checks you can run before real users arrive, written for Lovable, Bolt and Cursor builders.
Supabase RLS mistakes in AI-built apps
The Row Level Security gaps AI tools commonly leave, and the prompts to fix them.
Leaked API keys in Lovable and Bolt apps
How secret keys end up in front-end code and Git history, and what to do if yours has.
Pre-launch security checklist for vibe coders
A launch-day list covering auth, payments, rate limits, headers and backups.
Check your app in a couple of minutes
ShipMender scans your public GitHub repo or live URL for the issues in this guide: leaked keys, missing Supabase RLS, unprotected routes, open CORS, unverified Stripe webhooks and vulnerable packages. The teaser is free; the full report with copy-paste fix prompts is £29.
Run a free scan