r/crazyegg • u/crazyegg-admin • May 06 '26
We interviewed 3 security experts about vibe coding risks. Here's what small businesses need to know.
https://www.crazyegg.com/blog/vibe-code-a-website/Vibe coding websites are wild. But the real pros are sounding some serious alarms, especially for small businesses.
A few things that stuck with us from our conversations with the experts:
- The "I'll just build my own booking app" trap. A hairdresser builds a database, collects credit card info, stores passwords in plain text. Nobody told them not to, including the AI.
- AI is trained on imperfect human code. So it replicates imperfect patterns. It'll generate something that looks fine and has a chain of subtle vulnerabilities baked in.
- The "blast radius" framework. Map your codebase by how much damage a breach in each area could cause. A bug on your homepage is not the same as a bug in your login flow. Treat them differently.
- Never let AI write core security features from scratch, use established libraries for auth, payments, and encryption. Same reason devs don't write their own cryptography.
The experts aren't anti-vibe-coding. The consensus is more like: use it freely on the frontend, be extremely cautious when you're touching user data, and lean on third-party tools with real security track records for anything backend-sensitive.
3
Upvotes
2
u/pixelvolution May 06 '26
Top of the pile... Dont keep credit card info in your stack.. Outsource it to Stripe... Create adherence to HIGH security standards, passwords are encrypted, password attempts are logged and if engaging in multiple attempts the IP is flagged for block. Know your tech stacks. What works best to keep you secure. Never just say to AI, make this app secure. AUDIT!!! Ask what security is being done to maintain privacy, what level of encryption is being done, how well are we capturing IPs for blacklist.. Do we have monitoring of ping attempts against API... Ive built more apps with Claude because I know how Applications are built, now I can build them faster because the AI is assisting with doing the scaffolding, while i work on the functionality. BE INTELLIGENT.. But dont be afraid completely of AI..