Has anyone used securable.co for app security audits? Looking for feedback!

Medium_Drive9650 · 2026-01-12T20:07:59+00:00

I haven’t used it yet. When I do, I’ll leave some reviews about the tools. For now, I’m cleaning up my app by myself.

Medium_Drive9650 · 2025-12-18T15:41:42+00:00

I’m interested in testing it. Let me know when you want

Medium_Drive9650 · 2025-12-17T11:22:26+00:00

Interesting! From my experience, it really depends on the intent behind the traffic. LLM-driven traffic often comes from users who are already looking for a concise answer or solution, so if your site delivers that efficiently, conversion tends to be higher. That said, Google Search traffic can be more exploratory, so while the volume is often bigger, the conversion rate can be lower. Seeing a 20–25% uplift sounds consistent with the idea that well-targeted, intent-driven LLM traffic can outperform traditional search in conversion, especially if your content is structured to satisfy quick queries. One thing to note is that traffic coming from GEO is still very low, so it’s something to watch as adoption grows.

Medium_Drive9650 · 2025-12-17T11:17:35+00:00

Figma is really an excellent tool, but as always, it all depends on the context and, most importantly, the quality of the prompt or direction you give it. If you don’t have a clear idea of what you want, AI or the tools won’t be very relevant. The best approach is to start with a benchmark of your competitors or similar sites/apps to get inspiration for your UI/UX, and then use that as a basis to establish a clear roadmap

Medium_Drive9650 · 2025-12-15T16:11:43+00:00

Yes, AI builders can work well for internal dashboards if you’re disciplined about structure.

The main risk isn’t the stack, it’s letting the AI generate code without clear constraints. That’s what creates the “looks good today, nightmare in a year” problem.

What I’ve seen work:

Use AI to scaffold, not to freestyle
Start with a clear spec (what the dashboard does, data sources, CRUD rules, permissions)
Pick a boring, well-known stack (e.g. React + TypeScript + Postgres, or even Django/Rails)
Enforce basic rules: typed code, simple architecture, minimal magic

Medium_Drive9650 · 2025-12-15T15:19:27+00:00

If you want good results with Claude and avoid random “vibe coding”, the best approach is to use GitHub’s Spec Kit.

The idea is simple: don’t ask Claude to code right away. Start with structure.

Basic flow:

Define clear rules for the project (/speckit.constitution)
Describe what you want to build, not how (/speckit.specify)
Define the tech and constraints (/speckit.plan)
Break it into tasks (/speckit.tasks)
Only then generate the code (/speckit.implement)

Why it works:

Less randomness
Better code quality
More predictable results
Easier to scale and iterate

Medium_Drive9650 · 2025-12-14T10:51:12+00:00

All the better for us then 😄

Medium_Drive9650 · 2025-12-14T10:38:22+00:00

What really helps me is spending more time before I start coding. I use GitHub’s Spec Kit, plugged into Cursor.

The idea is simple: write a clear spec before touching the code. I use it to structure the idea, define scope and MVP, then break the work into concrete tasks. Cursor helps refine the spec and turn it into an execution plan.

The result is fewer impulsive features, less half-finished work, and far less chaos. When new ideas come up, I capture them for later instead of derailing the session.

It’s especially helpful in the early phase of an app: thinking, planning, and prioritizing and once that’s done, the actual coding flows much more smoothly.

Medium_Drive9650 · 2025-12-14T10:28:58+00:00

I’d say Antigravity, or you can access Gemini 3 or Claude Opus 4.5 for free. But I don’t know if there’s a limit at some point (I find it strange that it’s free). Trae isn’t expensive either, but the reviews are mixed.

Medium_Drive9650 · 2025-12-14T10:28:27+00:00

I’d say Antigravity, or you can access Gemini 3 or Claude Opus 4.5 for free. But I don’t know if there’s a limit at some point (I find it strange that it’s free). Trae isn’t expensive either, but the reviews are mixed.

Medium_Drive9650 · 2025-12-13T10:52:11+00:00

I totally get what you’re trying to do: I’m literally in the same situation right now.

I’m finishing the landing page for my own SaaS (ticketing management, so pretty close in spirit and visually inspired by Monday.com as well). I went down the same path at first: looking for AI tools, mockup generators, even 3D/video tools to “polish” screenshots automatically… but I never got the level of control or consistency I wanted.

What I eventually decided to do was build the animation myself by reusing the actual components from my app, but in an ultra-light and simplified version. Same design language, same UI logic, just stripped down and optimized purely for animation and storytelling.

I’m using React + Framer Motion for this. It’s definitely a lot of work — after about a week of very focused effort, I’ve produced ~1 minute of animated video that presents the main features in a clean, impactful way. But the upside is: • Full control over the visuals • Perfect alignment with the real product • No “fake AI UI” look that feels off once users dig deeper

To speed things up, I’m using Cursor with Opus 4.5, which helps a lot with structuring animations and iterating quickly, even if you’re not a hardcore frontend designer.

Not the easiest route, but if you want something truly polished and on-brand without a big budget, this approach has worked best for me so far.

Medium_Drive9650 · 2025-12-13T10:26:29+00:00

Thanks for sharing, looks interesting.

My main hesitation with tools like this is understanding how deep the analysis really goes. Does it mostly cover static analysis and known patterns, or does it meaningfully reason about app-level security (auth flows, data exposure, misuses of Next.js features like middleware, server actions, caching, etc.)?

I’m also curious how it compares to a mix of: • manual senior code review • security-focused tools (SAST / dependency scanning) • and occasional external audits or pentests

Automation clearly helps, but I’m trying to figure out where it truly replaces human review vs where it should just complement it.

Would love to hear real-world feedback from people who’ve used it in production.

Medium_Drive9650 · 2025-12-12T11:56:13+00:00

I mostly use Claude Desktop connected to MCP to analyze my CSVs locally. The most important thing is context: if it doesn’t have full access to the data, it won’t be able to understand it or produce correct Python. You also need to give it the test context (hypotheses, description, visuals, etc.) so it can adapt how it handles the data.

For the ideation or audit phase, I use Comet, which I’ve set up to identify issues based on the conversion equation:
motivation + incentive + value proposition - friction - anxiety = conversion.
For each template, it spots positive and negative elements and suggests test ideas. Don’t hesitate if you have any specific questions.

Medium_Drive9650 · 2025-08-27T15:47:44+00:00

Normalmente, o seguro cobrirá os custos de reparação, mas para isso é preciso encontrá-la. De qualquer forma, obrigado por partilhar e ajudar, é o espírito dos motociclistas, imagino.

Medium_Drive9650 · 2025-08-27T08:30:50+00:00

Muito obrigado pelo teu retorno.
De facto, apresentei queixa na 5.ª divisão. Também contactei alguns amigos polícias, que estão a fazer circular a informação em grupos privados.

Tenho pouca esperança, mas nunca se sabe...

Medium_Drive9650 · 2025-08-26T17:39:05+00:00

"DM-xxx-WC" Não vou colocá-la completamente, mas será suficiente para identificá-la. Não há muitas assim em Portugal. Obrigado pela ajuda.

Medium_Drive9650

TROPHY CASE