App Security for Vibe Coders

Description

Welcome to the Leanpub Launch video for App Security for Vibe Coders https://leanpub.com/appsecurityforvibecoders by Justin Farmer! 0:00 Justin Farmer introduces himself and the purpose of App Security for Vibe Coders 0:47 Defining vibe coding and the security risks facing non-programmer app builders 1:34 How AI tools like Claude, Lovable, and Bolt enable anyone to build and ship apps quickly 2:21 Len shares his own vibe coding experience building LeanPub's messaging system with Claude 3:56 How the book provides copy-paste prompts to fix security issues using your existing AI agent 4:41 Why you can't simply prompt AI to 'make my app secure' and be done with it 5:26 AI is now being used by hackers to automatically discover and exploit vulnerabilities 6:12 The asymmetry of attack vs. defense: attackers need only one hole, defenders must cover everything 7:43 Specific security issues vibe coders must address: databases, paywalls, and exposed API keys 8:09 ShipLatch: Justin's free scanner for checking the security of vibe-coded apps About the Book AI builders can take an idea to a live app in an afternoon. They write code that works, but not always code that's safe on the public internet. This 44-page, 18-chapter guide covers the places vibe-coded apps leak most: API keys in the frontend, Supabase tables without Row Level Security, exposed .env files, .git folders and source maps, debug pages, admin checks that only live in the UI, and payment webhooks that accept anything. Each chapter explains the problem in plain English and gives you copy-paste prompts to hand back to the same AI that wrote the code. It ends with a pre-launch checklist and a scan, fix and prove walkthrough. Written by Justin Farmer, who builds ShipLatch, a security scanner for AI-built apps. About the Author About the author I'm Justin Farmer, and I've worked in security and software for more than 20 years. I hold a master's degree in Information Security and Data Assurance. I founded Kernel, Inc., a cybersecurity consulting firm that served government and critical-infrastructure clients, and through its subsidiary Neo Cybersecurity I designed and ran an automated penetration-testing platform for small businesses. My job there was the same one this book does: find what's exposed, then explain the fix in plain language to people who aren't security engineers. I've also spent nine years as a senior systems engineer at T-Mobile, and I've taught information systems at the university level. Now I run an AI Coaching/Consulting agency and build ShipLatch, a scanner for apps made with Lovable, Bolt, Cursor and Replit. The tools are new, but the mistakes aren't: keys in the browser, databases that trust anyone, files that should never have shipped. This book shows you where to look and how to fix each one with prompts you can hand back to your AI. Justin Farmer Raleigh, NC Follow the author here! https://x.com/godzilla74 Thank you for watching, please like and leave a comment, we'd love to hear from you! Please Subscribe and Follow! YouTube: https://www.youtube.com/leanpub X: https://x.com/leanpub Instagram: https://www.instagram.com/leanpub Facebook: https://www.facebook.com/leanpub Create Your Own Leanpub Book! You can create your own book anytime here: https://leanpub.com/create/book Here's the tutorial showing how to write and publish a Leanpub book in your browser (it's free!): https://help.leanpub.com/en/articles/2932527-getting-started-writing-a-book-in-leanpub-s-web-browser-writing-mode If you're a Leanpub author and you'd like to submit your own Launch video for us to publish, or if you'd like to record a Launch video with Len, please go here: https://leanpub.com/launch. #books #leanpublishing #selfpublishing #leanpub #writing #cybersecurity #ai #webdevelopment #vibecoding #appsecurity #AIbuilders #cybersecurity #ShipLatch