Leanpub Book LAUNCH 🚀 App Security for Vibe Coders by Justin Farmer
AI builders can take an idea to a live app in an afternoon. They write code that works, but not always code that's safe on the public internet. This 47-page, 18-chapter guide covers the places vibe-coded apps leak most: API keys in the frontend, Supabase tables without Row Level Securit...
Welcome to the Leanpub Launch video for App Security for Vibe Coders by Justin Farmer!
About the Book
AI builders can take an idea to a live app in an afternoon. They write code that works, but not always code that's safe on the public internet.
This 47-page, 18-chapter guide covers the places vibe-coded apps leak most: API keys in the frontend, Supabase tables without Row Level Security, exposed .env files, .git folders and source maps, debug pages, admin checks that only live in the UI, and payment webhooks that accept anything.
Each chapter explains the problem in plain English and gives you copy-paste prompts to hand back to the same AI that wrote the code. It ends with a pre-launch checklist and a scan, fix and prove walkthrough.
Justin Farmer spent more than 20 years as a programmer and cybersecurity engineer and was an early adopter of AI. Today he is an AI coach, consultant and implementer, and he builds ShipLatch, a security scanner for AI-built apps.
About the Author
About the author
I'm Justin Farmer, and I've worked in security and software for more than 20 years.
I hold a master's degree in Information Security and Data Assurance. I founded Kernel, Inc., a cybersecurity consulting firm that served government and critical-infrastructure clients, and through its subsidiary Neo Cybersecurity I designed and ran an automated penetration-testing platform for small businesses. My job there was the same one this book does: find what's exposed, then explain the fix in plain language to people who aren't security engineers. I've also spent nine years as a senior systems engineer at T-Mobile, and I've taught information systems at the university level.
Now I run an AI Coaching/Consulting agency and build ShipLatch, a scanner for apps made with Lovable, Bolt, Cursor and Replit. The tools are new, but the mistakes aren't: keys in the browser, databases that trust anyone, files that should never have shipped. This book shows you where to look and how to fix each one with prompts you can hand back to your AI.
Justin Farmer
Raleigh, NC
