Harden How My App Stores & Handles Data
Protect user data properly — before a leak makes the decision for you.
The #1 vibecoding mistake: API keys sitting in your code or git history. Hunt them down.
Help me find and fix exposed secrets in my own app. This is the most common and most damaging mistake when building fast with AI. My stack: [FRAMEWORK / FRONTEND / BACKEND] I'll paste code, config, and my repo structure as needed. Do this: 1) Tell me everywhere secrets commonly leak in my kind of app — hardcoded keys, secrets shipped to the client/browser, .env files committed to git, keys in config or logs, API keys in front-end network calls. 2) Tell me exactly what to search my codebase and git history for to find them. 3) For anything exposed, give me the fix: how to move it server-side, use environment variables/secrets manager, and what to do about a key that's already been pushed (rotate it — explain how). 4) Show me how to keep it from happening again (gitignore, pre-commit checks). Be specific to my stack. Remember: anything in front-end code is public.