https://patchable.dev/blog Field notes on shipping AI-built apps to production. en-us https://patchable.dev/blog/best-vibe-coding-tools-ranked https://patchable.dev/blog/best-vibe-coding-tools-ranked Sat, 06 Jun 2026 00:00:00 GMT Every list of vibe coding tools ranks them by speed and features. We ranked them by what actually ends up in production — the defaults, the secrets, the exposed surface. https://patchable.dev/blog/is-vibe-coding-bad https://patchable.dev/blog/is-vibe-coding-bad Sat, 06 Jun 2026 00:00:00 GMT Vibe coding isn't bad — but the apps people ship with it usually are. Here's what actually goes wrong, and how to catch it before someone else does. https://patchable.dev/blog/is-your-lovable-app-secure https://patchable.dev/blog/is-your-lovable-app-secure Sat, 06 Jun 2026 00:00:00 GMT Lovable is the easiest way to ship a working app today. It's also the easiest way to ship a public database. Here's how to check yours before someone else does. https://patchable.dev/blog/vibe-coding-security-scanner https://patchable.dev/blog/vibe-coding-security-scanner Sat, 06 Jun 2026 00:00:00 GMT A free outside scan for apps built with Lovable, Cursor, Bolt, v0, Replit Agent or Claude Code. Find what's actually exposed in under two minutes. https://patchable.dev/blog/vibe-coding-security-risks https://patchable.dev/blog/vibe-coding-security-risks Sat, 06 Jun 2026 00:00:00 GMT Seven specific security problems we find in nearly every vibe-coded app we scan. None are exotic. All are exploited. Each takes ten minutes to fix. https://patchable.dev/blog/vibe-coding-security-guide https://patchable.dev/blog/vibe-coding-security-guide Sat, 06 Jun 2026 00:00:00 GMT A practical guide to securing AI-built apps. The 7 patterns that turn up in every vibe-coded app, in the order they get exploited. https://patchable.dev/blog/vibe-coding-with-claude https://patchable.dev/blog/vibe-coding-with-claude Sat, 06 Jun 2026 00:00:00 GMT Claude Code is the best vibe-coding partner available right now. Here are the three things it gets wrong every time, and the system prompt that fixes them. https://patchable.dev/blog/vibe-coding-with-cursor https://patchable.dev/blog/vibe-coding-with-cursor Sat, 06 Jun 2026 00:00:00 GMT Cursor is fast and capable. It's also the AI editor most likely to ship secrets to your bundle. Here's the .cursorrules file we use to stop that. https://patchable.dev/blog/vibe-coding-with-replit-agent https://patchable.dev/blog/vibe-coding-with-replit-agent Sat, 06 Jun 2026 00:00:00 GMT Replit Agent ships the whole thing for you — code, database, deploy, domain. It also ships five specific problems every time, in the same order. https://patchable.dev/blog/supabase-rls-for-vibe-coders https://patchable.dev/blog/supabase-rls-for-vibe-coders Sat, 06 Jun 2026 00:00:00 GMT Row-Level Security is the difference between a private database and a public one. Here's how to set it up correctly the first time, and how to test it actually works.