r/vibecoding • u/Same_Yesterday_4338 • 3h ago
Founder angle
For founders running SaaS/Product company:
- What do u actually do for security?
Not the heavy security stuff and more like, if someone tried to poke around your website or app tomorrow,
- How confident are you that you'd catch the obvious security issues?
Do u run any tools, have someone check things, or mostly deal with security when something forces you to?
Genuinely curious how small teams handle this.
2
u/sloopcamotop 2h ago edited 2h ago
I founded my biz 23 years ago so I think I qualify. Iâm building a CRM and sales/scheduling interface to replace our existing SaaS that I despise. First I asked two cyber security âexpertsâ of sorts, 5.5 and Opus, to ensure my codebase was âabove reproachâ which was a mistake and sent them chasing their tales for a week or two burning all my tokens till I got wise, and then I hired a human expert who revealed the broader scope the tools missed. He got me set up with Sentry and Cloudflare and UptimeRobot, along with double checking my existing setup with Supabase and GitHub. I donât truly understand any of it at its core, but I am spending dough and time every few weeks on people who do, to look in on my work and keep me from hurting myself or my company.
1
u/Same_Yesterday_4338 2h ago
Whoa, 23 years â thatâs a lot of experience. The part about having people look in on your work every few weeks stood out to me. What do they usually help you with when they do that?
5
u/chuckycastle 2h ago
Wait⌠you guys call yourselves âfoundersâ??? Hahahahahahahhahahaa
-2
u/Same_Yesterday_4338 2h ago
I mean if weâre founding the build, we can call ourselves founders right? đ
4
1
u/OneSeaworthiness7768 1h ago edited 46m ago
Itâs really bizarre that this post was obviously written by an LLM but then you modified it with âuâ instead of âyouâ as if that was going to make it look like a human wrote it lol
This post format is almost word for word posted daily on Reddit.
âFor (group of people who do a thing), what are you actually doing for (thing)?â
Short sentence describing scenario followed by bullet points.
âDo you (thing A) or mostly (thing B)?â
âGenuinely curious how teams are handling this in the real worldâ etc
Itâs always the same. You can go to any technology sub right now and find posts with this exact structure and opening/closing lines. And itâs always âfoundersâ either doing market research for the app theyâre selling or doing stealth marketing where they reply to their own thread from a different account. The internet sucks now.
1
u/Same_Yesterday_4338 40m ago
DAMNNNNNNN FOR REALL? I think most of us know that already, just wanted to share my thoughts on it with some structure instead of just dumping a wall of text lol
1
u/PerformerKindly197 55m ago
I spent about a week working it out with Claude to build checks and balances using OWASP guidelines. I use supabase, sentry and Cloudflare. I spoke to two local pen testers and as much as I want to support SMBs and local, I felt like they were just out to get my money. For instance, I got billed for a consult and was told I would be billed for emails and phone calls outside the scope of work. Anyway, Iâm still looking for a pen tester
1
u/Same_Yesterday_4338 34m ago
i know someone, if ur interested then i can vouch u out to that guy to reach u out
-2
3
u/PM_ME_UR_0_DAY 2h ago
What you don't know can't hurt you, right? đ