The latest articles on DEV Community by Victor Kononenko (@viiko). https://dev.to/viiko https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4135740%2F7a858ab4-3461-4955-b44a-0f5fa42c274c.jpeg https://dev.to/viiko en Victor Kononenko Mon, 21 Sep 2026 12:23:15 +0000 https://dev.to/viiko/magery-forge-security-audits-for-shipped-code-built-for-vibecoders-4290 https://dev.to/viiko/magery-forge-security-audits-for-shipped-code-built-for-vibecoders-4290 <p>I ship fast with AI agents and I don't have a security team — so every time I deployed, I had no idea if I'd just pushed a hole to real users.</p> <p>Raw scanner output ("Missing Strict-Transport-Security header") means nothing to me. So I built Forge to turn that noise into plain-English risks with a fix for each, delivered as a weekly report to my inbox.</p> <p>Key things:</p> <p>• Add a domain, run a check, read results in plain English — no security background needed.<br> • Every finding ships with a concrete fix, not just a red flag.<br> • Passive checks (DNS, SSL/TLS, headers, SEO) run instantly; active checks (crawling, forms, secret leaks) unlock after domain verification.<br> • Exposed over MCP, so my agent (Cursor, Copilot, Claude, OpenClaw) runs the audit and reads the report — I barely open the UI.</p> <p>Free while in beta. Built in public — honest feedback welcome: what's the first thing you'd want a tool like this to catch?</p> security vibecoding webdev ai