<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>VibeTect Resources</title><description>Practical guides to securing AI-generated code.</description><link>https://vibetect.com/</link><language>en-us</language><item><title>The vibe coding security checklist: 15 checks before you deploy</title><link>https://vibetect.com/resources/vibe-coding-security-checklist/</link><guid isPermaLink="true">https://vibetect.com/resources/vibe-coding-security-checklist/</guid><description>A practical pre-deploy security checklist for apps built with AI assistants — secrets, access control, authentication, input handling and configuration.</description><pubDate>Mon, 26 Oct 2026 00:00:00 GMT</pubDate><category>Checklist</category></item><item><title>Is AI-generated code secure? What the research actually says</title><link>https://vibetect.com/resources/is-ai-generated-code-secure/</link><guid isPermaLink="true">https://vibetect.com/resources/is-ai-generated-code-secure/</guid><description>What the evidence says about AI-generated code security — Veracode’s 2025 benchmark, package hallucinations, leaked secrets and real incidents — and what to do.</description><pubDate>Mon, 26 Oct 2026 00:00:00 GMT</pubDate><category>Research</category></item><item><title>How AI-built apps leak API keys — and how to stop it</title><link>https://vibetect.com/resources/api-keys-exposed-in-ai-generated-code/</link><guid isPermaLink="true">https://vibetect.com/resources/api-keys-exposed-in-ai-generated-code/</guid><description>Why secret keys end up in browser bundles and Git history in AI-generated apps, how to tell publishable keys from secret ones, and how to fix and rotate them.</description><pubDate>Mon, 26 Oct 2026 00:00:00 GMT</pubDate><category>Guide</category></item><item><title>Broken access control: the bug AI writes most confidently</title><link>https://vibetect.com/resources/broken-access-control-ai-generated-apis/</link><guid isPermaLink="true">https://vibetect.com/resources/broken-access-control-ai-generated-apis/</guid><description>Why AI-generated endpoints check login but not ownership, the four forms of broken access control, a five-minute test, and patterns that fix it for good.</description><pubDate>Mon, 26 Oct 2026 00:00:00 GMT</pubDate><category>Explainer</category></item><item><title>Supabase Row Level Security: what AI app builders get wrong</title><link>https://vibetect.com/resources/supabase-row-level-security-ai-apps/</link><guid isPermaLink="true">https://vibetect.com/resources/supabase-row-level-security-ai-apps/</guid><description>Why Row Level Security is the real boundary in Supabase apps, five mistakes AI-built projects make with it, how to test your database, and policies that fix it.</description><pubDate>Mon, 26 Oct 2026 00:00:00 GMT</pubDate><category>Guide</category></item><item><title>Local vs. cloud code scanning: what changes when your code stays on your machine</title><link>https://vibetect.com/resources/local-vs-cloud-code-scanning/</link><guid isPermaLink="true">https://vibetect.com/resources/local-vs-cloud-code-scanning/</guid><description>Local, repository-connected and URL-based security scanning each see different things. A clear comparison of privacy, access, coverage and when to use each.</description><pubDate>Mon, 26 Oct 2026 00:00:00 GMT</pubDate><category>Explainer</category></item></channel></rss>