Guides
Fix the things that matter first
Step by step guides for apps built with AI coding tools. Each one works today, by hand, with a prompt to paste into your own coding tool.
First steps
- Your first security pass in one afternoonWhere to start when the app is live and security was never looked at: the 16 criticals, in the order that finds the worst problems first.12 min readRead
- HTTPS and security headers in ten minutesThe headers every browser respects, what each one prevents, and a prompt that adds them in one pass.6 min readRead
Access and data
- Stop one user reading another user’s dataThe most common serious flaw in AI-built apps: a route that returns any record by ID. How to find it, fix it, and prove the fix.9 min readRead
- Lock down a hosted databaseIf your app talks to a hosted backend from the browser, the public key is only safe when row level security is on for every table.8 min readRead