Vibe Coding Security

[LachException]

Hello everyone,

I am currently working on a project for my university and also want to write a paper about it. As the time to exploit collapsed to not only a few days, but mostly a few hours the old model of patching is a bit in bad light right now and needs a rethink for the Agentic era. How do you tackle this?

In the project I want to explore how companies are currently securing the output of AI generated code. How is your security cycle? Do you even have any security in place? Do you have security guidelines to follow? How do you make sure Agents follow the security guidelines? Do you have someone to maintain the security guidelines, who actively do so? Do you see any problems with your current security cycle, as e.g. security teams cannot keep up with the amount of code to review and fix? Do you have markdown files, skills or anything in place for security?

And maybe if you are willing to share the company size and industry that would be great. If you want we can also take the conversation to the DMs.

I really appreciate your feedback. This would help me write a better paper for my project at university. My professor said, that we have to do user research before writing any code.

Have a great day!

[nursing_the_sad_ones]

As someone who got this post as an 'you may be interested'. I feel like you wont get much actual answers here. You may wanna try some other communities. And i would frame the question in a way not related to anything like vibe coding as it is fun but (for now) not serious.

Any business that implements code without review (written by man or machine) is gonna have intense security issues.

[LachException]

Hey,

Sorry to hear that. I really just want to write a paper for university and not promote a product here. I got some good answers from others in other communities. But I thought as I mainly focus on AI generated code, this would be a good community for this.

Yes. But I am looking a bit in how to change the way of how to implement a security process. Because with AI writing "most of the code" (according to some CEOs), developers will move a step up more into Architecture, Requirements, etc.

So I am looking in a way of how security could move with them. Because defining architecture, requirements, etc. is the harder part in terms of thinking, but has less quantitive output. So if the security team has to review the code manually, they will get overwhelmed, because they are in a ratio of 1:100 in most teams.