You are right, I'm not happy about apps still leaking the data. For now, my message is to go and click the Fix button. I know it won't reach everyone, but I think it's important people hear it and do it. In the…
no, it's all in Free tier. You can even enable auto-fix, so that you don't even need to look at scanner findings anymore.
I see it as an opportunity to educate the builder community on importance of using the provided security tooling. What I'm asking users is to use tools while building. Our tools explain security in business terms and…
in many cases, it's hard to understand and know is something is by design or by mistake. We are looking into having a path to take down apps that grossly violate privacy and data protection. It's a bit tricky legally so…
We are training our agent and models to get really good at RLS. A lot of projects mentioned in the research are created with older models, unfortunately. Which means, a worse starting point compared to where the models…
working on it!
We are moving this feature to all paid tiers soon. I agree that scanning on schedule needs to be available to everyone.
Auto-fix is tricky to get right without breaking the apps (imagine us having 99% of auto-fix success, at the scale of 10M apps, it would mean breaking 100 000 apps). We need to get really good at it - otherwise people…
We are investing millions per year into free security tooling. There will be even more changes democratizing security coming out soon, with more features moving to Free/Pro tiers from higher tiers - watch our release…
We noticed that many projects come from earlier builds. Roughly speaking, building an insecure app is much harder today than 6-12 months ago. Agent will protest and try to suggest alternatives if the builder asks to…
Indeed, we are looking into having a path to take down apps that grossly violate privacy and data protection. It's a bit tricky legally so we need to find a good balance. Our thinking is so far: notification with ask to…
Surprisingly, for many users it's the fear that the fix will break production. And no matter how good are findings or warnings, or modals blocking publish, some apps will still do it. And that's why I believe auto-fix…
Igor here, Head of Security at Lovable. Thanks to the Crissy Field team for their work. The root cause in these apps was insufficent Row-Level Security, which is exactly what our scanning is built to catch. We scan…
[dead]
You are right, I'm not happy about apps still leaking the data. For now, my message is to go and click the Fix button. I know it won't reach everyone, but I think it's important people hear it and do it. In the…
no, it's all in Free tier. You can even enable auto-fix, so that you don't even need to look at scanner findings anymore.
I see it as an opportunity to educate the builder community on importance of using the provided security tooling. What I'm asking users is to use tools while building. Our tools explain security in business terms and…
in many cases, it's hard to understand and know is something is by design or by mistake. We are looking into having a path to take down apps that grossly violate privacy and data protection. It's a bit tricky legally so…
We are training our agent and models to get really good at RLS. A lot of projects mentioned in the research are created with older models, unfortunately. Which means, a worse starting point compared to where the models…
working on it!
We are moving this feature to all paid tiers soon. I agree that scanning on schedule needs to be available to everyone.
Auto-fix is tricky to get right without breaking the apps (imagine us having 99% of auto-fix success, at the scale of 10M apps, it would mean breaking 100 000 apps). We need to get really good at it - otherwise people…
We are investing millions per year into free security tooling. There will be even more changes democratizing security coming out soon, with more features moving to Free/Pro tiers from higher tiers - watch our release…
We are investing millions per year into free security tooling. There will be even more changes democratizing security coming out soon, with more features moving to Free/Pro tiers from higher tiers - watch our release…
We noticed that many projects come from earlier builds. Roughly speaking, building an insecure app is much harder today than 6-12 months ago. Agent will protest and try to suggest alternatives if the builder asks to…
Indeed, we are looking into having a path to take down apps that grossly violate privacy and data protection. It's a bit tricky legally so we need to find a good balance. Our thinking is so far: notification with ask to…
Surprisingly, for many users it's the fear that the fix will break production. And no matter how good are findings or warnings, or modals blocking publish, some apps will still do it. And that's why I believe auto-fix…
Igor here, Head of Security at Lovable. Thanks to the Crissy Field team for their work. The root cause in these apps was insufficent Row-Level Security, which is exactly what our scanning is built to catch. We scan…
[dead]