Hey Product Hunt! 👋 I'm the maker of ShipClear. Every day, over 200'000 of apps are being built with AI coding tools like Cursor, Bolt, and Claude Code. It's incredible for velocity, but it's creating a massive blind spot: Security. AI assistants optimize for functionality. If you say "build me a login page," you get a login page. You don't automatically get rate limiting, CSRF protection, or brute force detection. The gap isn't in the code; it's in the prompt. I audited a few "vibe coded" apps recently and found Supabase tables with RLS disabled, API keys exposed in client code, and endpoints wide open to credential stuffing. That's why I built ShipClear. It's a 100% free security framework specifically for developers who ship with AI. It consists of two main tools: 🛡️ ShieldPrompt (Pre-Build): A system prompt you paste into your AI agent before you start building. It forces security-first code generation from line one. 🔍 VibeScan (Post-Build): A 9-phase, 70+ check audit. You just copy it, give it to your AI agent, and say "audit my codebase against these checks." It covers Authentication, Database Security, API Endpoints, Secret Management, Payments, and more. Why is it free? Because security shouldn't be a premium feature. There's no signup, no email gate, and no paywall. Just copy the markdown and go. I'd love to hear your thoughts! Have you run into security issues while building with AI? What checks would you add to the framework? I'll be here all day answering questions. Happy (and secure) shipping! 🚀

ShipClear

Free security framework for AI coding agents.

Free security framework for AI coding agents.