Security guides for founders who build with AI
Short and practical. No jargon.
Is my Lovable app safe?
What usually goes wrong in apps built with Lovable and Supabase, how to check your own app in an afternoon, and when it’s worth asking an engineer.
3 min read
Is my Bolt app safe?
What to check in an app built with Bolt: who can read your data, where your keys live, and what Bolt’s own security check can’t see.
2 min read
Is my Base44 app safe?
Where Base44 apps usually leak, what Base44’s own scan covers, and a check you can do yourself before real users arrive.
2 min read
Is my Replit app safe?
What Replit checks for you, what it lets through to your live app, and the gaps worth closing before you launch.
2 min read
Is my Cursor or v0 app safe?
What to check in an app built with Cursor or v0: secret keys, logins, database rules and payments, in plain words and without reading code.
2 min read
Supabase row level security in plain words
What row level security is, why your Supabase key being public is fine when it’s on, and how to check every table in a few minutes without writing code.
3 min read
I leaked an API key: what to do in the next hour
A calm checklist for when a Stripe, OpenAI, Supabase or other secret key ends up in your website or a public repo: replace it, check usage, close the gap.
2 min read
My app was hacked: what to do first
Strange accounts, missing data or a user saying their details leaked? The first steps for an AI-built app: close the door, keep evidence, tell people.
3 min read
A surprise bill from my app: what happened and what to do
A sudden OpenAI, Supabase or Vercel bill usually means a copied key or a feature anyone can call. How to stop the spending today and find the cause.
2 min read
Bolt, v0 and Cursor app security checklist before launch
Twelve plain checks to run before real people use an app you built with Bolt, v0, Cursor or Replit: keys, data access, logins, payments and a way back.
2 min read
Who can fix my AI-built app?
Fix it yourself, hire a freelancer, hire an agency or use OpenKeel: when each one fits, what to watch for and what to ask first.
2 min read
What it costs to audit or fix a vibe-coded app
Rough public prices for scans, audits, penetration tests, freelancers and rescue projects, with sources, and what moves the price.
3 min read
How to give an engineer access without sharing passwords
Invite an engineer to GitHub, Supabase and your host with their own account and the least access they need, and take it back cleanly when the work is done.
2 min read
What a security audit covers
What an OpenKeel engineer checks in an audit of an AI-built app, what you get back, and what it leaves out.
2 min read
See what anyone can see about your app
If something needs fixing, a real engineer can take it from there.
Free · No card · About 20 seconds