Vibe coding is all fun and games until you get hacked
Vibe coding offers developers an exciting, AI-driven approach to software creation, but it also introduces significant security risks. AI-generated code often contains overlooked vulnerabilities because the developers frequently don't fully understand or thoroughly review the generated outputs.
For example, prominent vibe-coded projects shared publicly on platforms like X.com have unintentionally shipped with critical security flaws, such as cross-site scripting (XSS) vulnerabilities.
Pieter Levels' browser-based flight simulator, built through vibe coding, notably included at least one XSS vulnerability at launch or introduced during subsequent AI-generated feature additions.
Similarly, security researchers have demonstrated how AI-generated code commonly introduces issues like SQL injection, insecure authentication practices, and arbitrary file reads due to context-dependent oversights by the AI.
By investing in specialized security audits tailored for vibe-coded projects, developers can proactively identify and mitigate these vulnerabilities, ensuring safer deployments and protecting their users from potential exploits.
Why should you hire me?
I am an OSCP-certified penetration tester with a lot of experience finding security flaws.
A few public security issues I found and reported:
“I worked with Greg to go through all my sites and apps and make sure they are safe. I love being a scriptkiddie hacking together and shipping fast but security is nothing to be fast about because you hold user's data and have to keep that safe. Having Greg pentest everything, audit my code and follow his recommendations helps me sleep a bit better at night.”
“When I was planning on making Keygen open source, getting a penetration test and security audit was a major prerequisite. I knew Greg was a great choice, with his deep understanding of Ruby and of Rails. Greg completed the security audit according to schedule, and with his help and recommendations, I was able to successfully patch the issues he found. When it comes to security, I highly recommend Greg and Spektr.”
“Tens of thousands of students and many universities rely on our software each semester to provide course content, assessments and grades. It is critical that we provide a service that is secure and reliable to each stakeholder involved. For a small team without specific security expertise, we knew (and were strongly encouraged by our partners) we needed to get a reliable security audit and penetration test to make sure all of our systems were as secure as possible. Greg's expertise was evident from our first meeting. He meticulously audited our systems, identifying vulnerabilities with precision. His insightful recommendations were invaluable, allowing us to fortify our digital infrastructure effectively. Greg's thorough approach to security has not only enhanced our systems but also given me and all of our partners a peace of mind. For anyone seeking top-notch security solutions, I wholeheartedly recommend Greg and Spektr.”
What is a vibe audit?
A vibe audit is a cheap option penetration test. Instead of a thorough audit that uncovers almost always all of the vulnerabilities, it is a mostly automated code audit to find the low hanging fruits.
It will not uncover all security issues, but it will find the silly mistakes AI code generation usually makes.
Services
Vibe audit
$990
Don't let silly mistakes to shatter your dreams
- A short audit of a vibe codebase
- You receive a report with the findings
You will need to give access to the codebase
