nowfound

AI · June 13, 2026

Secure Vibe Coding Pack

91.5% of AI apps are vulnerable. Fix it with 60 prompts.

Secure Vibe Coding Pack launched on June 13, 2026 with 2 votes.

What it does

I shipped an app with Claude. Found out the hard way that working code isn't secure code. Claude defaults to insecurity: JWT in localStorage, hardcoded secrets, raw SQL strings, no RLS. So I tested 100+ prompts to fix this. Found 60 that work. Three modes: Generate (build secure from scratch), Audit (find holes in existing code), Harden (fix shipped code safely). Then paste, verify, ship confidently. Works with Claude, Cursor, Lovable, v0, Bolt.

91.5% of AI-built apps shipped with a security hole last quarter. Yours might be one of them.You described what you wanted, the AI wrote the code, it worked, you shipped it. 🎉Here's what nobody told you: AI coding tools are optimized for code that works, not code that's safe. They're trained on the internet — and the internet is full of insecure tutorials. So by default they hand you:- 🔓 Auth to

Does a similar job

all alternatives →
  • Claude 22023 · claude.ai · ▲248

    It was quite interesting to vibe code this artifact. I learned some basic ideas about commitment scheme and hash cryptography in the half and hour spent on this. One of the few times vibe coding left me feeling enriched rather than drained. What do you think?

  • Perfai SecurityJul 2026 · perfai.ai · ▲291

    Find & fix live vulnerabilities in Vibe Apps with 1-prompt.

  • Vibe PrologNov 2025 · github.com · ▲44

    Like a lot of people I got the $250 Claude Code credit and didn't use it up. I decided to try to use it up over the weekend using (mostly) my phone and vibe coded a Prolog interpreter. Now I'm seeing how far I can push it.

  • Vibecheck – lint for AI-generated code smells (JS/TS/Python)Mar 2026 · github.com · ▲7

    I built a CLI that detects patterns AI coding tools leave behind: empty catch blocks, hardcoded secrets, as any everywhere, comments that restate the code, god functions, SQL concatenation. 24 rules across JS/TS and Python. Zero config, runs offline, regex-based so it's fast. npx @yuvrajangadsingh/vibecheck . Also ships as a GitHub Action for inline PR annotations and standalone binaries (no Node required). Why: CodeRabbit found AI-generated PRs have 1.7x more issues than human PRs. Veracode says 45% of AI code samples have security vulnerabilities. "Vibe coding" is everywhere now…

  • TrustMay 2026 · trust-scan.me · ▲2

    The security scanner built for vibe coders

  • VibeWrenchApr 2026 · vibewrench.dev · ▲1

    Scan your AI-built app before you ship it

More ai this month

the category →
  • Video model that turns script into viral social media videos

    AI · 17d ago · spira.ai

  • The browser where Claude Code and Codex work beside you

    AI · 17d ago · rill.love

  • Kolibri is Aleph Alpha

    AI · 19d ago · tej.as

  • Paintings by AI models: programs run through a simulation of oil paint.

    AI · 20d ago · stillwet.art

  • A real-time world model you can explore and change

    AI · 29d ago · world.pixverse.video

  • Hemory▲381

    Keep listening. Searchable memory for your AI agents.

    AI · 30d ago · hemory.com

Source: Product Hunt launch ↗

Launched alongside, June 2026

the whole month →
  • Fundraisly▲1,537

    AI fundraising agent that finds investors and books meetings

    AI · Jun 2026 · fundraisly.com

  • Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate). Happy to discuss any questions here!

    Dev tools · Jun 2026 · brew.sh

  • Hi HN! I was super frustrated at apps like tiktok and wechat preventing me from saving or downloading the animated gifs, so I made a little tool to turn a screen recording into a slack-sized emoji. Hope you get some value from this!

    Life & fun · Jun 2026 · vorpus.github.io

  • Upstream▲976

    The inbox designed for humans and agents

    AI · Jun 2026 · upstream.do

  • Goldfish▲958

    Press Option. It knows your work and replies like you

    AI · Jun 2026 · goldfish.sh

  • Search 18 years of Hacker News and chart how any topic, tool, or person trended. Overlay terms to compare their rise and fall across 45M posts and comments.

    Life & fun · Jun 2026 · hackernewstrends.com