Author
Barret
Barret is an engineer, builder, and entrepreneur. He built Is My Site Hackable? to catch the security gaps that AI app builders leave behind. Father, husband, author, and incurable tinkerer (from woodworking to endurance racing), he writes about shipping software that actually holds up. More of him at Men Made Better.
Recent writing
Exposed Secrets and API Keys in Frontend Code: The Complete Guide
An exposed API key in your frontend isn't always an emergency. Learn which keys are public by design, which are real leaks, and how to find and rotate the dangerous ones.
Firebase Security for AI-Built Apps: The Complete Guide
Firebase security rules in plain English for vibe-coded apps. Your API key is public by design — learn what's actually secret and how to secure Firebase.
Supabase Security for AI-Built Apps: The Complete Guide
A plain-English guide to Supabase security for AI-built apps. Learn the real risks — RLS, service keys, storage buckets — and how to check your own app today.
Vibe Coding Security: The Complete Guide
Vibe coding security, explained for non-developers. Why AI-built apps ship with leaks, the main risk classes, and how to check your own app in minutes.
Vibe Coding Security: Connectors, Previews, Bans
Lovable ships per-user connectors, Vercel tightens preview deployment defaults, and Codeberg bans AI-generated code. What it means for your app's security today.
Next.js Server Action CVEs: What Vibe Coders Must Patch
Nine Next.js CVEs hit App Router and Server Actions, Nuxt patches a high-severity RCE, and an AI model breached a database on its own. Here's what to patch.