Most AI chatbot templates trust the browser more than they should — exposed API keys, system prompts overridable via curl, CORS headers that only block browsers, not scripts. WidgetForge flips that: API key stays server-side, system prompt rebuilt on every request, CORS enforced with a real 403, two-tier rate limiting plus a daily cost ceiling. 5 AI providers, 4 themes, HTML + Next.js. One config file. Built for real client sites, not demos.
Hey Product Hunt 👋
Built this after seeing how many "AI chatbot template" products skip the boring-but-critical parts — API key handling, CORS enforcement, prompt injection protection. Wanted something I'd actually be comfortable putting on a real client's site, not just a demo.
Happy to answer anything about the setup, the provider integrations, or the security decisions behind it. Also open to feedback on what's missing — this is v1.
Live Demo: https://chatbot-temp-nine.vercel.app/