Author
Barret
Barret is an engineer, builder, and entrepreneur. He built Is My Site Hackable? to catch the security gaps that AI app builders leave behind. Father, husband, author, and incurable tinkerer (from woodworking to endurance racing), he writes about shipping software that actually holds up. More of him at Men Made Better.
Recent writing
Exposed Secrets and API Keys in Frontend Code: The Complete Guide
An exposed API key in your frontend isn't always an emergency. Learn which keys are public by design, which are real leaks, and how to find and rotate the dangerous ones.
Firebase Security for AI-Built Apps: The Complete Guide
Firebase security rules in plain English for vibe-coded apps. Your API key is public by design — learn what's actually secret and how to secure Firebase.
Supabase Security for AI-Built Apps: The Complete Guide
A plain-English guide to Supabase security for AI-built apps. Learn the real risks — RLS, service keys, storage buckets — and how to check your own app today.
Vibe Coding Security: The Complete Guide
Vibe coding security, explained for non-developers. Why AI-built apps ship with leaks, the main risk classes, and how to check your own app in minutes.
Vibe Coding Security: Who Cleans Up the Mess?
Lovable's $400M raise, Vercel's own warning on long-lived agent tokens, and a beginner asking about auth show why vibe coding security still lags behind speed.
Vibe Coding Security: What 1,969 Lovable Apps Reveal
A scan of 1,969 Lovable apps found real leaked secrets. Lovable ships a Trust Center. Vercel warns AI is closing the gap with attackers. What it means for you.