@agentic.james: If you're vibe-coding consumer facing apps and you're not security testing them, you're shipping exploits you can't see. The best tool I've found for this is Shannon, it's basically an agentic hacker built to find the holes in your own app before someone else does. It reads your source to map every attack vector, then spins your app up live and actually runs the attacks: injection across every surface, broken auth, broken authorization, all of it, inside an isolated Docker container you launch with one command. The light version is fully open source and free, the pro version covers the production-level vectors you only hit once you're deployed. Obviously only run it on repos you own, in staging or a sandbox, this is a real exploitation tool. Comment SECURITY and I'll send you the repo.

357

There are no more comments for this video.

To see more videos from user @agentic.james, please go to the Tikwm homepage.