vibeAudit Blog

Security tips for AI-built apps. Practical guides for Lovable, Cursor, Bolt, and v0 developers.

LOVABLE March 28, 2026

Top 5 Security Vulnerabilities in Lovable-Built Apps

Lovable ships fast, but it skips security defaults. Here are the 5 most common vulnerabilities we find in Lovable apps -- and how to fix each one.

CURSOR March 25, 2026

Your Cursor App is Probably Leaking API Keys

AI coding assistants like Cursor often put secrets directly in client-side code. Here's how to find and fix leaked API keys before attackers do.

SUPABASE March 22, 2026

Supabase RLS: The One Setting That Exposes All Your User Data

Row Level Security is the single most important setting in Supabase. If it's off, anyone can read your entire database. Here's how to fix it properly.