Learn
AI code security, explained
Plain-language answers to the security concepts behind AI-generated code, and why each one trips up vibe-coded apps.
What is Row Level Security (RLS)?Read →Supabase anon key vs service_role key: what's the difference?Read →Why isn't an environment variable enough to hide a secret?Read →What are HTTP security headers?Read →What is a hardcoded secret, and why is it dangerous?Read →What is CORS, and why is a wildcard origin risky?Read →