Playbooks & production notes

Security, page 4

Security guidance for AI-built apps: authentication, authorization, tenant isolation, secrets, storage, and public endpoints.

Security

Web app security for an app you did not write: 12 controls, each with a test

22 min read
Security

Web application penetration testing: what it covers, how a small scope is agreed in writing, and what comes back

18 min read
Security

Website security check for your own web app: four layers, what each scanner proves, and the tests to run by hand

20 min read
Security

What are insecure defaults? The managed-platform settings that leak data, and the safe value for each

16 min read
Security

What is API key? What an API key is, what holding one allows, and what it is not

16 min read
Security

What is prompt injection, and the four things that harden an AI feature: injection defenses, output checks, per-user limits, and a fallback

15 min read
Security

Nine Prompts That Change What Your AI Builder Writes

24 min read
Security

Best MCP Servers for Claude Code: 13 Ranked by What a Leak Would Cost You

27 min read
Security

Code Audit Service: How to Choose One and What to Ask For

7 min read
Security

Do I Need a Pen Test? What SOC 2 and Customers Actually Require

12 min read
Security

Vibe Coding Security Scanner: 5 Tools Compared

10 min read
Security

API Security Checklist for AI-Built Apps

22 min read
Security

Are Vibe Coded Apps Safe? The Security Risks and How to Check

15 min read
Security

OWASP LLM Top 10 2026: The Risks Explained

28 min read
Security

Vibe-Coded App Hacked? Signs, Real Cases, and What to Do Now

21 min read
Security

How to Secure Vibe-Coded Apps When You Can’t Read the Code

18 min read
Security

Vibe Coding Security Checklist: 12 Checks, Each With a Test (2026)

17 min read
Security

GitHub Copilot Security Risks: What Each Plan Does and Does Not Cover

20 min read