After shipping my vibe coded app I realized I had no idea if it was actually secure — how do you handle this??

Been building with Bolt and Cursor lately!!

Shipped my first micro SaaS last week!!

Then a friend told me to check my frontend JS for exposed API keys!!

Found my Supabase anon key sitting right there in plain sight!!

Applied the fix — but then realized I had zero way of knowing if the fix actually worked!!

Also what happens when I ship the next feature?? Do I manually check every time??

How do other vibe coders handle ongoing security??

Do you just manually scan occasionally??

Do you use any tools??

Would WhatsApp alerts about security issues be useful??

Genuinely curious how others handle this.