Free security checklist
Is your vibe coded app safe to ship?
32 checks to run before your AI-built app goes company wide. Hand it to Claude and get a report.
Get the checklist
All 32 checks, every fix and the Claude prompt, as a PDF.
Why it matters
45% of AI-generated code samples introduced a known security flaw.
Newer models write code that runs. They have not got better at writing code that is secure.
Source: Veracode, 2025 GenAI Code Security Report. 80 coding tasks across 100+ LLMs; flaws from the OWASP Top 10.
What's inside
Two parts, 32 checks, each with the fix
Part 1 · Checks 01 to 20
20 ways vibe coded apps are getting hacked
- Framework, files and payments
- Logins, data and third parties
- AI features, tokens and accounts
- Domains, servers and links
- What the browser gives away
Includes
Part 2 · Checks 21 to 32
12 controls for rolling out across the company
- Identity and access
- Data, secrets and packages
- Running it and owning it
Includes
How to use it
Run it with Claude in three steps
Get the PDF
Fill in the form and open the checklist straight away.
Give Claude your code
Open Claude Code in the project folder, or connect the repository, and attach the PDF.
Paste the prompt inside
Then work through the fixes it proposes, highest risk first.
Who we are
Built by the team that runs AI in production for creative companies
Caffrey.ai
$400k
AWS funding delivered
We delivered $400k in AWS funding for Caffrey.ai, and run its legal AI platform for them, from cloud infrastructure and deployment to security.
A24
75%
Faster incoming screenplay workflow
A24's film development team runs incoming screenplays through Koobrik, our screenplay management platform.
DC Comics
90%
Shorter production timeline
An automated tool that reformats legacy comic pages for vertical mobile reading, cutting turnaround from hours to minutes per issue.
Podcast
Technically Creative
Conversations on technology, AI and the creative industries, with guests from SAG-AFTRA, Disney, 72andSunny, The One Club, ElevenLabs and more.