congrats, you vibe-coded your own software. you’re also the head of security now
yesterday, Railway was breached and thousands of vibe-coders (and companies) spent the day rotating every API key / password / token they had stored on there
then had to audit their entire tech stack and assess their exposure (i.e. maybe they weren’t exposed directly, but vendor A they use was)
same day, PHP (the language behind ~70% of websites) patched two bugs that could let a stranger take over your server without a password
if you are building your own software, all of that is on you:
> you need to stay up to date on the latest cybersecurity news
> you need to routinely audit and update your tech stack
> you need to spring into action to reduce exposure on days like yesterday
> you’re responsible and liable for your (and your customers’) data
or rather than vibe-coding your own storefront, you could pay shopify $39/mo and let 7,600 experts handle payments, fraud, PCI compliance, and all of the above for you
rather than vibe-coding your own newsletter platform, you could pay @beehiiv $49/mo and let 130 specialists handle deliverability, security, uptime, and everything else
AI made it easier to build your own software… but it also made it easier to break into it. there will be many more p0 exploits like yesterday moving forward
SaaS isn’t invulnerable, but at least those companies are staffed with senior engineering teams and security experts who handle issues like this for a living
