Secure Vibe Coding
A day for vibe coders who want to understand why their app might leak, and how to fix it themselves.
Importing a skill into Claude Code or Codex takes seconds. Understanding what it does, and why it makes your app safer, is what this day is about. First you hack a few leaky practice apps yourself. Then you close them up with AI. So you recognise a leak in your own app, and know what to ask your AI tool.
5.0 from 4 reviews on Google“Took a great Claude workshop. I really learned a lot from it. Recommended!” Marieke Pietersma
Understanding what happens.
A good base prompt helps. But if you don't know why, the next leak will catch you out again.
AI tools write insecure code unless you ask them not to. Secret keys in the browser, a database open to anyone, input nobody checks. On this day you see with your own eyes how that goes wrong, because you exploit it yourself. Then you learn to write prompts and skills you understand. So you build apps your customers can trust, and you don't flinch when someone asks how secure it is.
After this day you can
- 01Explain what security is, and why vibe-coded apps often leak
- 02Recognise the most common pitfalls in your own work
- 03Understand how an attack works, because you carried one out yourself
- 04Write prompts and skills that make your AI tool build more securely, and understand why they work
- 05Assess your hosting: how safely is your app online
- 06Run your own app through a checklist and name improvements
What the day looks like.
What is security?
Why AI tools write insecure code, and the most common pitfalls in plain language: secret keys in your code, open databases, weak login and permissions, unchecked input and customer data that becomes visible.
Hack it yourself
In pairs you find the leaks in a few deliberately leaky practice apps and exploit them. For each leak we discuss what happened and what a real attacker could have done.
Securing with vibe coding
You close the same apps up with AI. You learn to write prompts that produce secure code, use skills and standing instructions, and check your AI's checks yourself.
Hosting
How safely is your app online? Where are your keys, who can get in, which basic settings you change right away, and what you do if it goes wrong anyway.
Your own app
You run your own app through today's checklist. The trainer walks around and helps. You go home with your own list of improvements.
This workshop suits you if…
- You've been vibe coding for a while and have your first apps live, or nearly.
- You connect tools yourself, or have your own backend and frontend with a database and APIs.
- You want customers and users to be able to trust your app.
- You have a bit of technical background, and want to understand what happens under the bonnet.
Just starting with vibe coding? Begin with the Vibe Coding Workshop or the Claude Workshop.
Practical
No open date is scheduled yet. Let us know you'd like to join, and you'll be the first to hear.
Register interestWhat you take home
- Your own experience: hacked it yourself and secured it yourself
- A security checklist for your own apps
- Example prompts and skills to keep working with, and the understanding to adapt them
- A list of improvements for your own app
What participants say about our Claude Workshop.
Took a great Claude workshop. I really learned a lot from it. Recommended!
Great & clear explanations! If you want to expand your knowledge of AI, I recommend it!
Had an incredibly instructive course from Maarten!
Who stands in front of the room.
This workshop is always led by a developer: René or Stijn. They build software every day and review all AI code. So you learn from someone who meets these leaks for real, and knows how to close them.
René Vrieling
Builds Empathree's software and reviews all AI code before it goes live. Knows from his own work where vibe-coded apps leak, and how to close them up.
Stijn Hoksbergen
Helps build Empathree's software and AI solutions. Turns smart ideas into reliable code, and shows you what happens under the bonnet.
Secure Vibe Coding for your own team?
Does your team build apps with AI? Tell Maarten what you make and with what. We'll tailor the day to your own software, so your team knows where the leaks are the very next day.
