I Found 30+ Security Vulnerabilities Across My 11 SaaS Products

After reading a post about vibe coding risks, I did a full security audit across all 11 of my self-hosted SaaS products.
Here's what I found and fixed:
Authentication & Rate Limiting

No rate limiting on register/login routes → added IP-based limiting

Authorization

Missing auth middleware on several API endpoints → patched

Demo Mode

Demo accounts could bypass restrictions → fixed permission checks

Database

Over-privileged DB users → tightened to minimum required permissions

All running in production for 3 days before I caught this.
If you're shipping fast with AI assistance, don't skip the security pass.