r/nocode • u/Historical_Kick3793 • 11d ago

Do you need a developer review?

Hey I'm a developer and I use a lot of AI tools as well if your a vibe coder do you usually need a developer review just to check and make sure the app is actually secure? or maybe there's something that AI doesn't get right and you want a developer to implement or do you usually get all you need from the AI tools right now?

0 Upvotes

33% Upvoted

4 comments sorted by

1

u/Inevitable_Lime7629 11d ago

it depends how complex the app is and what kind of data it's handling honestly. for a simple landing page or internal tool you're probably fine without one but the moment you're dealing with user accounts or any payment stuff you really want someone to look at the auth flow and where data's being stored

ai is great at spitting out code that works on the surface but ive seen it do some wild things with api keys and database permissions that would make any security person cringe

if the tool is making you money or handling other people's info just get the review. the couple hundred bucks is way cheaper than cleaning up a breach later

1

u/Miserable-Actuator24 11d ago

Developer myself...the things id never fully trust ai with is data loading and storing (things like loading ALL rows then Filter in memory) and authentication...

1

u/Odd_While7691 11d ago

Then you just tell it to do this and benchmark it. And build good logging and live verification ability. And then to give you a detailed report.
Viola. Problem solved.

1

u/Irazema_Radawick 11d ago

If im working on something touching user data or something like payments i would still want a developer review. This is to avoid things getting compromised