Checked and Fixed @checkedandfixed
Security checks for AI-built apps. We find leaked API keys, open databases and missing locks, then fix them. Plain English. From £79. checkedandfixed.com UK Joined October 2026-
Tweets9
-
Followers3
-
Following26
-
Likes0
@paublds Great dataset. One of the easiest traps to fall into is boring: Supabase tables with no RLS, so anyone logged out can read other users' data. A quick test is to open your app in incognito and see what loads.
@jayypatel18 This is the scary bit. Most solo builders don't even have a list of which keys live where. Step one is to write down every key, where it's stored, and who can see it, then rotate the ones that can spend money first (Stripe, OpenAI, AWS).
@denk_tweets The rotation is only half of it. A lot of vibe-coded apps also have a key sitting in the front-end bundle, where rotating on Railway doesn't help. Worth a 2-minute check: open your live site, view source, and search for sk_ or service_role
Railway says an attacker may have got decrypted environment variables on 21 Oct. If your app runs there, rotate every key it holds today (OpenAI, Stripe, database passwords), then check each provider's usage logs for anything odd. Their notice: blog.railway.com
@fanofaliens If you installed it, rotate everything that was on that machine, not just the AI keys: cloud logins, GitHub tokens, Stripe keys, anything in a .env file. Then check your live app isn't shipping any of them to the browser.
@joshmillgate Good list. I'd add one before the kill switch: check what's already public. A lot of vibe-coded leaks aren't hacks at all, just keys sitting in the frontend code or a Supabase table with RLS (row-level security) off. 5 minutes in devtools beats a bad week.
OpenCode says a breach of a legacy system exposed third-party AI API keys for about 1.4% of its Console users. If you've ever pasted an OpenAI, Anthropic or Google key into a hosted tool, it's worth rotating it today and setting a spend limit.
Built your app with Lovable, Bolt, Replit, Cursor or v0? We run a read-only check for exposed keys, open databases, missing headers and leaked files, then explain what we find in plain English with fix prompts. Start with the free mini-check: checkedandfixed.com
This week a developer shared how a .env file published to a static host led to a roughly $90,000 cloud bill. Before you deploy: keep secrets in your host's environment settings, check your live site doesn't serve the file, and set a spending cap. x.com/i/trending/211…
Maggie 🤍 @glosspeach769
1 Followers 217 Following Leave me a cute message — let’s see where the chat goes 🌻
Aitor @aitordri
29K Followers 10K Following Founder | Startups @vermuio i run, code, eat, dive & travel
Zodiac @Zoddiacc
157 Followers 180 Following Building at the intersection of AI and automotive software. Shipping in public. 🚗🤖
Riley Brown @rileybrown
260K Followers 3K Following Building an @agentnative_ company. Media: [email protected]
@levelsio @levelsio
981K Followers 3K Following 💸https://t.co/sQ0aiU7v02 📸https://t.co/lAyoqmSBRX $86K/m 🎮https://t.co/tF49atJ396 $44K/m 🏡https://t.co/1oqUgfD6CZ $23K/m 👙@X $13K/m 🌍https://t.co/UXK5AFqCaQ $7K/m 🏩https://t.co/4p4dzTDVN6 $5K/m
Marc Lou @marclou
417K Followers 1K Following ⭐️ https://t.co/MZc8tGa5LQ $53K/m 📈 https://t.co/3EDxln5U2Q $31K/m 🧑💻 https://t.co/Y30jsaI4oH $7K/m ⚡️ https://t.co/vatLDmiHKe $2K/m 🍜 https://t.co/r07EpGTwyA $1K/m 📧 https://t.co/D3PMnJqNa5 🕵 https://t.co/3JtsA6kIng +35 https://t.co/4zCWHGJWRq
Truffle Security @trufflesec
5K Followers 1 Following The TruffleHog company We find credentials, with open source https://t.co/7CnEqo1inq https://t.co/8vZxthRRXX
Snyk @snyksec
21K Followers 772 Following Trust AI at full speed with Snyk. System status: https://t.co/tsOiR7QK9Q
Clint Gibler @clintgibler
26K Followers 586 Following 🛡️ Leading Cyber at @OpenAI 📚 Creator of https://t.co/xwtIAI0CuJ newsletter
ᴅᴀɴɪᴇʟ ᴍɪ... @DanielMiessler
161K Followers 2K Following Building Vector: The Enterprise AI Operating System @ https://t.co/D38E5CY488, and LifeOS: The Human Magnification OS @ https://t.co/muV0Un0Hi8 | Ex: Apple, Robinhood, HP, Army
NetworkChuck @NetworkChuck
273K Followers 843 Following Believer. Beard. Coffee. Tech. Youtube. Check the link in my bio to see my latest video!
Troy Hunt @troyhunt
256K Followers 1K Following Founder & CEO of @haveibeenpwned, the most trusted name in data breach intelligence. Speaker, blogger, Microsoft Regional Director. Gold Coast, Australia.
Anton Osika @antonosika
85K Followers 1K Following building the last piece of software @lovable prev physics
Netlify @Netlify
106K Followers 1K Following Build with AI or code, deploy instantly. One platform built for agent experience (AX). Need support? https://t.co/bEIBAUzAwR
Firebase @Firebase
224K Followers 45 Following Unlock the power of generative AI for your app and business. Firebase helps you prototype, build, and run modern apps that users love at scale.
Replit ⠕ @Replit
240K Followers 583 Following Idea to app, fast. Create beautiful, modern web applications at the speed of thought with the power of Replit's AI Agent.
bolt.new @boltdotnew
123K Followers 51 Following Build without boundaries. Create stunning web apps that scale to millions by collaborating with AI.
Lovable @Lovable
160K Followers 62 Following The fastest way to turn ideas into software people love.
Supabase @supabase
215K Followers 100 Following The Postgres development platform. 🌐 https://t.co/kHsst88XA1 ⭐️ https://t.co/txGagqok1i 🎥 https://t.co/6eTjCTIrzK 💬 https://t.co/ikFm89oPVI
Volodymyr Pavlenko @mindinpanic
5K Followers 4K Following solo dev in lisbon 🇵🇹 building small apps. latest: bedline 🌙 $30 MRR and counting 📈 https://t.co/HKTFeoEceP screens, design votes, no startup theater
KP @thisiskp_
73K Followers 3K Following The "Build In Public" Guy. Head of Community at @Netlify. Evangelist for AI startups. Prev: @PaddleHQ @joinODF
Ben Tossell @bentossell
202K Followers 592 Following can't code, won't code. builder, investor (dev tools/infra) @supabase @etched @factoryAI @sfcompute. 3 👶 under 4.
Matt Johansen @mattjay
47K Followers 2K Following Founder of @vuln_u | Long Island elder emo surviving in ATX | AI and Cybersecurity news from an 18yr industry vet
You might like
