WTF is Vibe Coding Security? Risks, Examples, and How to Stay Safe

Vibe coding (non-developers using AI to generate and deploy code) and the more automated agentic coding create rapid, widely distributed software that often lacks reviews, tests, and security controls. The article describes real-world anecdotal failures (including a Replit-related production database deletion and insecure admin routes in hobby apps), explains why the problem scales as more non-engineers ship code, and recommends guardrails—reviews, CI/CD scanning, secrets management, PromptBOMs, and Vibe-Coding Assurance Levels—to reduce resulting vulnerabilities.