How to launch a vibe-coded app securely: a step-by-step guide
Take an app built with Claude Code, Cursor, Lovable or Bolt live safely: find leaked keys and open data, deploy, add Cloudflare, test and monitor.
Security
Code and dependency scanning, server hardening and incident response, with commands you can run today.
Cloudflare security and performance settings for every plan
What to switch on in Cloudflare on the Free, Pro, Business and Enterprise plans, what each upgrade adds, and how to check your setup from outside.
Compromised Linux server: what to do in the first hour
A minute-by-minute runbook for a hacked Linux server: isolate without powering off, snapshot disks, capture evidence, hunt persistence, rotate secrets.
Dependency scanning tools compared: SCA, SBOMs and malware
Dependabot, Renovate, OSV-Scanner, Trivy, Grype, Syft, Snyk, Socket, npm audit and pip-audit compared, with CI snippets and a layered setup.
Linux server hardening checklist for Ubuntu 24.04 LTS
A tested Ubuntu 24.04 hardening checklist: SSH keys only, sudo, automatic updates, firewall, fail2ban, auditd, sysctl, logs, backups and CIS checks.
SAST tools compared: SonarQube, Semgrep, CodeQL and Snyk
SonarQube, Semgrep, GitHub CodeQL, Snyk Code and Bearer compared on free tiers, pricing, CI setup and false positives, with a small-team setup.
Security review skills for AI coding agents in 2026
How /security-review, Claude Security, Codex Security, Cloudflare's audit skill and Semgrep Guardian work, what they miss, and how to vet skills.