Email content

Most small businesses have no idea they're one booking form away from a data breach.

You build a simple website with AI. Looks great. Works perfectly. Zero problems.

So you get confident. You build a reservation form. Capture names, emails, maybe credit cards.

But nobody told you that passwords are being stored in plain text.

That's the vibe coding trap.

Our team talked to three security and engineering experts about what's actually going wrong. Here's what they told us:

You don't know what you don't know. AI will generate code that looks correct and is still deeply insecure. Subtle flaws are how systems get exploited.

Blast radius matters. Not all code is equally risky. A broken homepage is annoying. A broken login flow is catastrophic. Treat them differently.

Never let AI implement core security from scratch. Authentication, encryption, session handling, etc use established libraries. There are very few people in the world who can write secure cryptography. AI isn't one of them.

Use third-party tools for anything sensitive. Databases, payment processors, file storage. These companies have spent billions on security. Borrow their work.

The opportunity with vibe coding is real. 25% of Y Combinator's last cohort shipped codebases that were 95% AI-generated.

But velocity without guardrails is just stacking risk.

If you want the full breakdown, including what "agentic engineering" actually means and why it's different from vibe coding, the post is here.

— Hiten

P.S. For comments, the Reddit thread is here.

P.P.S. We also just integrated Google Analytics key events into Crazy Egg, if you want to use them to track your Crazy Egg conversion events. More details here.

Crazy Egg, 13337 South St, #269, Cerritos, CA 90703, United States

Unsubscribe

Manage preferences