Vibe-Coded Apps Riddled with Flaws: AI Dev Speeds Up Commits 3-4x, Security Alerts 10x
alex_verem · x · 2026-08-02
Escape scanned 5,600 public-facing apps built via "vibe coding" and found that 25% contained critical security flaws. The researchers identified 2,038 critical vulnerabilities, over 400 leaked secrets (including API keys), and 175 exposed PII records. The Cloud Security Alliance noted a complete lack of basic protections like CSRF or security headers across the entire sample.
A parallel study by Apiiro across Fortune 50 enterprises revealed that while AI-assisted developers pushed commits 3-4x faster, they also generated security findings 10x faster, causing monthly alerts to surge from roughly 1,000 to over 10,000 within six months.
More from coding & agent
- ERP•AI launches headless SaaS with $0 seats that bills machines: $1 buys 4,000 record writes — rohanpaul_ai · 2026-10-16
- FDE-Gym benchmark shows huge gap on real AI delivery tasks: top model scores 0.563 — DeepLethe · 2026-10-16
- ModelClock launches free read-only MCP server to track model deprecations — zomenaro · 2026-10-16
- Vibe-coded dashboard leaked franchise financials before anyone logged in — shauntrennery · 2026-10-16
- Fintech HR built a sourcing agent on 60,000 past applicants — 30 qualified candidates in a month — G0NZ0BOY · 2026-10-16
- Orchestrating a 100-image portrait of humanity for aliens with ChatGPT, Argon and p5.brush — dx8xb · 2026-10-16