Tag: Web development
-
Supabase RLS for Vibe-Coded Apps: The Policies Your AI Forgot to Write
If your AI-built app uses Supabase, every user can probably read every other user’s data — because Row Level Security is off or the policy says true. The 60-second check, the four policies every table needs, and the prompt that gets the AI to write them properly.
-
I Leaked an API Key in My Vibe-Coded App: What to Rotate, In What Order, and How to Stop It Happening Again
A secret key in your deployed bundle or git history is the most time-sensitive problem an AI-built app can have. Rotate first, investigate second, fix the code third — the exact order, which keys matter most, and the tripwires that prevent a repeat.
-
My Vibe-Coded App Got Slow at 50 Users: The 5 Fixes (Before You Upgrade Anything)
Instant with three test users, unusable at fifty real ones. AI-built apps slow down at a predictable point for predictable reasons — N+1 queries, filtering in the browser, missing indexes, request waterfalls, refetch-on-keystroke — and almost none of them need a bigger server.
-
Vibe-Coded App Not Showing Up on Google? The Technical SEO Fixes for AI-Built Sites (2026)
You built the site with AI, launched it, and Google can’t see it. The eight technical SEO problems almost every vibe-coded site ships with — client-only rendering, missing metadata, no sitemap, blocked crawlers, slow Core Web Vitals — and the fix for each, in the order that gets you indexed fastest.
-
From Lovable, Bolt or Replit to Production: How to Move a Vibe-Coded App Off the Prototype Platform
Your Lovable, Bolt.new, v0 or Replit app has real users and you’ve hit the platform’s ceiling. When to migrate, what to take with you, the six steps to a proper repo and deploy pipeline — and the parts that are worth having an engineer do.
-
Vibe Coding Security Checklist: 15 Things to Check Before Real Users Touch Your App (2026)
Is your vibe-coded app secure? Probably not yet. The 15-point vibe coding security checklist we run on AI-built apps — exposed API keys, missing Supabase RLS, broken authorisation, unlimited AI spend — with the one 5-minute test that finds the worst problem.
-
My Vibe-Coded App Is Broken and I Can’t Fix It: What to Do Next (and When to Hire Help)
Your AI-built app worked yesterday and now it doesn’t, and every new prompt makes it worse. The triage sequence that stops the bleeding, the three fixes you can still do yourself, and the point where hiring an engineer becomes cheaper than another day of prompting.
-
From Vibe-Coded Prototype to Production: The 12-Point Audit
Your AI-built prototype works and someone wants to pay for it. The twelve checks we run before that is safe — and the one question that decides whether it needs hardening or a rebuild.
-
Core Web Vitals 2026: Thresholds, What Changed, and the Technical SEO Checklist
Core Web Vitals in 2026: the current LCP, INP and CLS thresholds, what has and hasn’t changed in how Google scores them, the 12-point technical SEO checklist, and the fix order that actually moves field data.
-
How Much Does It Cost to Build a Web App in 2026?
What a web app actually costs in 2026, and why the honest answer is a range. The five factors that move the number, and how to brief so the estimate holds.