nowfound

AI · June 13, 2026

Secure Vibe Coding Pack

91.5% of AI apps are vulnerable. Fix it with 60 prompts.

What it does

I shipped an app with Claude. Found out the hard way that working code isn't secure code. Claude defaults to insecurity: JWT in localStorage, hardcoded secrets, raw SQL strings, no RLS. So I tested 100+ prompts to fix this. Found 60 that work. Three modes: Generate (build secure from scratch), Audit (find holes in existing code), Harden (fix shipped code safely). Then paste, verify, ship confidently. Works with Claude, Cursor, Lovable, v0, Bolt.

Does the same job

all alternatives →
  • Perfai SecurityJul 2026 · perfai.ai · ▲291

    Find & fix live vulnerabilities in Vibe Apps with 1-prompt.

  • VibeSec2025 · ▲249

    Find and Fix Code Vulnerabilities Instantly!

  • VP
    Vibe PrologNov 2025 · github.com · ▲44

    Like a lot of people I got the $250 Claude Code credit and didn't use it up. I decided to try to use it up over the weekend using (mostly) my phone and vibe coded a Prolog interpreter. Now I'm seeing how far I can push it.

  • VL
    Vibecheck – lint for AI-generated code smells (JS/TS/Python)Mar 2026 · github.com · ▲7

    I built a CLI that detects patterns AI coding tools leave behind: empty catch blocks, hardcoded secrets, as any everywhere, comments that restate the code, god functions, SQL concatenation. 24 rules across JS/TS and Python. Zero config, runs offline, regex-based so it's fast. npx @yuvrajangadsingh/vibecheck . Also ships as a GitHub Action for inline PR annotations and standalone binaries (no Node required). Why: CodeRabbit found AI-generated PRs have 1.7x more issues than human PRs. Veracode says 45% of AI code samples have security vulnerabilities. "Vibe coding" is everywhere now…

  • TrustMay 2026 · trust-scan.me · ▲2

    The security scanner built for vibe coders

  • HC
    Happy Coder – End-to-End Encrypted Mobile Client for Claude Code2025 · github.com · ▲30

    Hey all! Few weeks ago we realized AI models are now so good you don't need to babysit them anymore. You can kick off a coding task at lunch and Claude Code just... works. But then you're stuck at your desk steering it. We were joking around - wouldn't it be cool to grab coffee and keep chatting with Claude from your phone? Next thing you know, 4 of us are hacking on weekends to make it happen. Dead simple to try: "npm install -g happy-coder" then run "happy" instead of "claude". That's it. We had three goals: * Don't break anyone's flow - Use Claude Code normally at your desk, pick up your…

More ai this month

the category →
  • I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15). The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device. The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn't work.

    AI · 17d ago · simedw.com

  • Astute585

    Automate your B2B brand going viral, with new media creators

    AI · 18d ago · company-app.joinastute.com

  • Grok Bot547

    AI teammates that you can give real work to

    AI · 25d ago · x.ai

  • Hey HN, Henry from Cactus here! We previously released Cactus Needle, a 14MB agentic LLM for tool call, device use, and structured extraction for phones, wearables, smart homes, small robots and microcontrollers. We got really great feedback here, and have now incorporated the suggestions to release Needle 2. The whole model is a single 14MB binary that runs a full session in 28MB of RAM; 45m parameters at 2bit compression. Needle hits 500 tokens/sec decode speed on a Raspberry Pi 5, sits between 400-1,500 tokens/sec on VR devices like Meta Quest 3S and Apple Vision Pro, and ranges…

    AI · 27d ago · cactuscompute.com

  • Monid474

    OpenRouter for agent tools

    AI · 6d ago · monid.ai

  • Turn website visitors into qualified pipeline

    AI · 19d ago · clarasdr.ai

Launched alongside, June 2026

the whole month →
  • Fundraisly1,544

    AI fundraising agent that finds investors and books meetings

    AI · Jun 2026 · fundraisly.com

  • H6

    Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate). Happy to discuss any questions here!

    Dev tools · Jun 2026 · brew.sh

  • PU

    hope you enjoy

    Life & fun · Jun 2026 · vorpus.github.io

  • Upstream977

    The inbox designed for humans and agents

    AI · Jun 2026 · upstream.do

  • Goldfish962

    Press Option. It knows your work and replies like you

    AI · Jun 2026 · goldfish.sh

  • IM

    Life & fun · Jun 2026 · hackernewstrends.com