Your API key might be in your page source. Check in 30 seconds
AI coding tools often put secret keys where every visitor can read them. Here's how to check your live site, what counts as a secret, and how to fix it properly.
· 5 min read
AI coding tools often put secret keys where every visitor can read them. Here's how to check your live site, what counts as a secret, and how to fix it properly.
· 5 min read
If your app has a login, a form or analytics, you're collecting personal data. A plain-English guide to when you need a privacy policy, what goes in it, and what else gets checked.
· 6 min read
AI tools build what you ask for. Nobody asks for security headers or a privacy policy. Twelve checks to run before you share the link, in order of how much they can hurt.
· 7 min read