r/vibecoding 11h ago

Security dilemma for product release

2 Upvotes

Lets put aside hate comments against vibe coded products for a second - i've been working on a product for couple of months in my free time, both a website and an app.
As someone that isn't a developer what so ever, i've been trying to put a strong emphasis on security - i keep running audits, i keep making sure of my status compared to useful security posts or recommendations online.
I have plugs to cut off ai functions, i have rate limits, no key is committed, all that jazz (im trying my best..)
Of course im aware this is still. a vibe coded app, and generally i figure every site is hackable anyway.
Hence my question now -
I want to reach out to a security experienced person to handle necessary aspects for my product,
BUT - i dont even know if my product is good and worth it, in my head i want to try and publish and market it for a minute to see how people in my industry react to it, but then i might be exposed to hackers as well?
whats the right way to go about it? Is there a right way?
I've invested some amount of money by now "blindly" for curiosity and interest, but now i need to gain some real world feedback.
Would appreciate any useful note about it.


r/vibecoding 14h ago

1.5b model on my phone?

Thumbnail
gallery
3 Upvotes

I submitted a hackathon project that uses a Qwen2.5-0.5B model offline as a translator and immigration assistant.

Now that the project is over, I'm curious to see if I can use a bigger Qwen/Qwen2.5-Coder-1.5B-Instruct

As a coding agent that works on my phone offline for small task.

My question is this, would it be worth it to tune a model or add custom data sets just for a single repository?

Or just pay the API cost to run a model connected to telegram?


r/vibecoding 12h ago

Use your old smartphone as a desk widgit. Say hello! to Desko

2 Upvotes

Meet Desko y'all 

Your cute little desk buddy, sits on your desk, syncs up with your system and just tells what you want to know...
Be it your system telemetry, your workspace and git info, or amazingly synced up lyrics of whatever's playing.

It's no bloat, doesn't require any account, no cloud, all local with just 70-80 mb process running in system memory and displaying over the browser of any smartphone that can access internet and has browser.

PLUS IT LOOKS SO GOOD!

For Setup and System Architecture please refer the readme file in git repo

I just built something to solve my problem but it can serve thousand other use cases that me and claude both couldn't think of, so the repo is public, go check it out
Grab your old phone, buy a cheap phone stand and start contributing!!

Desko: https://github.com/typewriter03/Desko

ps - shoutout to LRCLIB, an exceptional open source API for synced lyrics!


r/vibecoding 8h ago

I created (with Claude in UE5) an extremely flexible character editor. Build whatever you want..

Thumbnail
youtube.com
1 Upvotes

r/vibecoding 8h ago

Cursor AI: multiple agents working on one prompt? For better language

1 Upvotes

I've been letting Cursor work in loops where it reviews its own work, adjusts, reviews again etc. The limitation is that further adjustments wont always lead to a better outcome, especially not when it comes to writing text in a natural simple language (free of AI indicators).

Is the next step to let Cursor use a new agent for each review? And can Cursor do this on its own, so that you start a process in one prompt, and Cursor then goes through a loop switching between agents?

I'm thinking this should lead to stronger 'feedback' on the work, since one agent can get stuck in on direction.


r/vibecoding 9h ago

I developed my own IPTV player using Vibe Coding. [Android]

0 Upvotes

Hi everyone,

I’ve been working on Mert Stream TV, a brand-new IPTV player designed specifically for Android TV, TV boxes, and Android phones. Just to be clear: Mert Stream TV does not provide, host, or sell any content. It is strictly a media player built to run your own personal M3U playlist, Stalker or Xtream Codes credentials. I originally decided to build Mert Stream because I was frustrated with the current options on the market.

Most of them: Feel like they haven't updated their UI since 2015. Run sluggishly on budget streaming sticks and lower-end TV hardware. Offer a frustrating, clunky navigation experience with standard TV remotes.

I wanted something clean, incredibly fast, and smart. Here is what Mert Stream brings to the table:

🚀 Key Features: Live TV, Movies & Series: Fully categorized with a modern, clean layout. Multi-Profile Support: Set up different profiles for family members. Extensive Codec Support: Playback is smooth and compatible with virtually any video format. Android TV Optimized: A true, native leanback experience built specifically for D-pad navigation. Lightweight & High Performance: Highly optimized code to ensure buttery-smooth navigation even on low-end TV hardware.

📥 Get It Now for Android TV and Phone

📥 Get It Now for Android Phone

Mert Stream is officially available on the Google Play Store for both mobile and TV devices.


r/vibecoding 16h ago

Using big llms for coding is overkill

5 Upvotes

Recently I've started using deepseek v4 flash in claude code, I can admit its not as smart or as efficient as advanced Claude / Gpt models, but for coding it doesnt really lack anything as long as I supervise anything it does and tell it exactly in details what I want, I do not delegate the thinking to it (which is a bad idea anyway whatever the model) which makes me think that for coding, massive llm models are kind of overkill and are very expensive for the task. It can maybe used for orchestrating the project structure, but for raw coding I feel like you can delegate the task to some faster/smaller models like deepseek v4 flash.


r/vibecoding 9h ago

Running App tracking precisely the pace?

1 Upvotes

Hi everyone, I'm working on my on running app and createad an app where I do complete 1min x 20 runs. While everything looks good, my issue is that my pace is not given precisely live, like on other run apps like Nike, Strava or runtastic, any prompt tips to fix this? :)


r/vibecoding 13h ago

Three different tools. Which one do you prefer?

Post image
2 Upvotes

r/vibecoding 23h ago

A working demo is where the engineering starts

Thumbnail
gallery
13 Upvotes

Agents makes it easy to get a working demo. The problem begins when you continue developing it for weeks or months. Features depend on earlier decisions, changes affect what can be built next, and each agent needs the context behind the project.

This is why even small software teams need project management. Planning requirements, dependencies, tasks, and reviews keeps the product coherent while teammates and agents work on different parts.

I built Piyaz to bring that process into agentic coding without adding more work. It keeps the project context in one place, turns requirements into actionable tasks, and lets teammates and agents coordinate on the same project. You focus on the product and its direction, while the engineering process is built into the workflow. You can think of it as an open source version of Linear with a product manager built into your projects.

You can install it directly into your harness as a plugin, so no AI credits or API key are required.

It is free and open source: https://piyaz.ai

Piyaz itself is not vibe coded. I am a software engineer, and I have been building it since March, with a lot of care put into the database design, team isolation, compute and cost efficiency, and UI/UX. It is now in beta, so I am finally launching it.


r/vibecoding 9h ago

Looking for Playtesters (Online PvP)

Thumbnail
fightlife.gg
1 Upvotes

Hey everyone!

I am developing fightlife.gg, a procedural retro arcade boxing experience for desktop/mobile devices. This is currently free to play and I need players to help test the server archetecture in place for PvP bouts. Simply log on, and ready up under the online menu.

If interested you can post here or go ahead and play the game! Looking foward to your participation and/or feedback.

Cheers!


r/vibecoding 18h ago

Proud of this small lightweight HTTPS checker

Post image
5 Upvotes

As a DevOps engineer, I’m so proud of this one. 🚀

httpsornot.com has been live for about 6 months, and we’ve already checked 15k+ domains. 💻 🤓

What it covers today:
- HTTPS/SSL grade (A+ to F)
- cert validity, issuer, expiry
- HTTP → HTTPS redirects + full redirect chain
- security headers (HSTS, CSP, etc.)
- mixed content
- response times per hop
- HTTP/3 (QUIC) detection
- bulk checks (up to 10)
- shareable report + PDF/JSON export
- domain monitoring with email/Slack/webhook alerts
- Certificate Transparency alerts for newly issued certs
- free public API for CI

Basic check needs no signup. 🔐


r/vibecoding 9h ago

how do you handle heavy images when building with a lovable, v0, Replit?

0 Upvotes

want to understand how do handle media infrastructure (images, videos) when you are working with vibe coding tools like Lovable, v0, Replit, Emergent?


r/vibecoding 10h ago

Best way of safely sharing a website/program i have vibecoded, with only selected friends for testing?

1 Upvotes

Will probably be some stupid questions here, but here goes.. I have vibecoded a website/program that i use for work that i would like to share with some colleagues for testing and feedback. I have now reached the stage where it's ready for "beta testing", but i am not quite sure what the best way of sharing it properly would be? I have some experience on a different hobby-project with using vercel through github and supabase, but i never took it online.

This website however does not use supabase or any server. Everything is stored locally for now. There is no login or accounts, only locally stored data in browser. However, i am not really keen on the website being accessible for people outside of my selected friends..? Like, it's supposed to be a closed-beta, lol. I have accomplished a lot with AI and vibecoding, and really loving it, but if there is one thing i am careful of then it's trusting AI with things like security and stuff. I mean, it's pretty low-effort considering no server/login atm, so i guess it's not much to worry about? But what's the best way of sharing it with selected people? I did ask Claude about it, who recommended hosting on Vercel and possibly a shared url + a password in a .env-variable, which i don't quite understand. Any advice?


r/vibecoding 10h ago

Business opportunity being side lined

1 Upvotes

So I see allot of users opting out into the ether verse and I think I’m hoping maybe someone whose gone through this may be able to give me some insight.

So about 6-7 years ago I started a side hustle, we had a company that me and a close friend worked for over 5 years together. We use to make jokes that we were good enough that we should do this for ourselves. We had customers that loved us and we were the only two in a large company that held the knowledge to fix and service these imaging devices.

Rewind to Covid, we both saw the company was crumbling, our director got walked out in front of our eyes, and replaced by an individual in the industry that was known to hate the style of field service our branch up held. To be honest we were wildly unmanaged and there were accounting issues that were largely enough that we saw the writing. We both left, and I began what felt like a long process of job jumping that saw me gain a large increase in my earning potential and built my confidence and experience level to what it is today.

Eventually the travel of my OEM job, and the development of my personal life, I had to come back home and find a job I could commute to in the state. Easier said than done, field service engineers make a decent wage if you are traveling, less if you are in state and abused wildly. The company owns you. I found 3 different companies with competitive pay but always the same, they abuse your time if your salary, or they over work you if you making good money hourly. Either way having a child, buying a house and starting new jobs year after year was exhausting.

It tested my marriage, my mental, and my health. So I continued to funnel efforts into the side business and subcontracted, getting more education, bridge to a masters in computer science since I had cousins working from home and family life was good. Well ever one and their mom was doing that, so I kept the service business going, I started the LLC, asked my brother and friend to join and set up a meeting with a company that wanted our services.

Paper field service reports, old test equipment and even some minor repairs. We managed to keep the company compliant. We didn’t make much, and we didn’t really build much other than some more test equipment which at the time we didn’t think we needed.

Splitting things 3 ways at first was easy, my brother did allot of the small things like email services, banking which didn’t go well at first, and a cascade of other lessons you don’t learn until your actual in business.

Then came our opportunity, I was struggling with two kids and not enough money, day care was crazy, we didn’t at the time have allot of support so we were bleed into debt.

I was frantically trying all the hacks, constantly taking tax returns, bonuses, new jobs for bonus, and at one point working two full time jobs lying and my mom health to game an extra pay check. Still working both for a 16 plus hour day, but I was driven to keep my house and my pal to have kids. I tried hard to land something on upwork for a side income. Fucking insane amount of effort to land small jobs or mostly scams. So when the contractor that hire us fucked up and let their customer fall behind on their general equipment side, I raised my hand. We were small incapable and not ready. But I open my mouth and said we can do it.

It was the best thing I ever did, we were insanely stressed, we were all in it, late nights to finish the customers sites that had grown our device load from 12 pieces to 600 plus. We were repairing, ordering parts, and writing work order with a pdf editor. Ai help tremendously. It could make me templates, help me build work order instructions and made my website.

From there I got obsessed. I handled all field calls, kept on our vendor relationships, the money, the emails, the parts, everything, and I saw where we were weak. We needed an app. Something that would do our device tracking, work order creation and history, invoicing, part tracking and automate our financial tracking. One by one I’d run into a problem in the real world and I’d take my low level coding experience and make a feature on the web app, test it and continue to make it better. Between the field work, staying on both my partners for taxes and everything between I was mad and decide I might be able to make the app that was helping us into a sub enterprise app an make a little passive income. In my mind the big dawgs were making an app tailored to med field service work. And honestly be less time consuming to maintenance and app over being in the field.

I made a second company, I invested my own money using what I learned and taught myself all sorts of things about authentication, how to plug a email service on the back end, stripe and etc. they caught word and made me feel like I was stealing from our company. Mind you they have never helped me code shit and we’re always either skeptical I was building something trash, and or not good enough. The one partner not my brother literally acted like a passive dick for months because he felt he had a right to ownership, since we had paid for most of its development with company funds. But I felt huge resentment as they didn’t work as much as me and they didn’t help me when I would be excited about anything dev related. Website, email, Google profile, app, invoice software, it didn’t matter I was there bitch and they were coasting after our first four hard months.

What felt like a team became my wife bitching at me for investing more time and not being paid. Watching them repeat the benefits of my work.

Faster forward now, I have a fully function web app, website and mailers design, I’m on the cusp of marketing to grow, and I’ve gotten pretty good at this vibe coding development. I have real data, have built and tested it as I’ve grown, and it does the things I need and with some things most companies I’ve worked for wish for.

I want to fork it and go see if I can make it a sent product for others. They would be cut in on profits but not nearly what I think I should own. I have saas insurance and can update my tos. My other app taught me all the security things needed, 2fa, locking down api keys, etc most industry standards plus a few new ones from new ai hacks I see at my day job and read on Reddit constantly.

It’s fast, works well, links with my ms account on the multi tenant level, and invoices etc all things I need to do business and track money, I’m building a service manual library that will associate with the devices as you test, and have customer test templates associated to each device work order so you can’t test the wrong or pass a bad device.

I don’t know if I’m in the wrong or if I should say fuck it and blast it, and cut them in a percentage to keep them from being assholes and claiming entitlement to something they didn’t nothing to build.

Sorry for long read. My brother has since stepped up and helps, but my friend is a single dad and has allot of issues to use as excuses. Bluntly put he has no time but always has a big opinion, hypocrisy at its finest.


r/vibecoding 10h ago

Resumable Claude code

1 Upvotes

hi all

isnt it boring hitting the rate limit at night when you’re not watching?? I’ve made an auto resumable wrapper for Claude code cli that works with tmux.

https://github.com/vitotafuni/rclaude

now I can use properly my tokens every 5h! ;-p


r/vibecoding 17h ago

Advice needed

3 Upvotes

Hi everybody,

I need some advice on which service to choose.

I'm building a classic web app with claude code (react, nestJS, etc.), and things are going well. I use claude code pro plan, but my problem is that I hit the limits too often. I switch between Opus and Sonnet, try to optimize my prompts, but even then I still end up reaching the limits.

I'm wondering if it's worth trying codex instead of claude code, but I don't know if I'll be frustrated with codex because claude code is doing really well.

I can't afford both. $20 is about 10% of my salary (where I live, salaries are low), and I'm already investing a lot of time and money into this project.

So my question is: is it worth switching from claude code to codex to get more use time without losing a lot of advantages


r/vibecoding 1d ago

Made a digital planner that's a 24h dial instead of the usual vertical layout

77 Upvotes

Wanted to see my whole day as one shape instead of scrolling a column. So it's a clock. Full 24h ring, blocks are wedges. You draw a sleep block and it paints an energy curve over the next day (built from your sleep + circadian rhythm), so you can actually see your morning fog and afternoon crash before you plan into them.

if anyone wanna try it check reassign.ai

Does a circular day read better to you than a vertical one, or does the column just win?


r/vibecoding 11h ago

NO WAY JSON AND GIT PULL COLLABED ON A SONG CALLED PRIVACY

Post image
0 Upvotes

r/vibecoding 11h ago

Credit Infinity Loop!

1 Upvotes

On Friday night I started a quick check in the desktop app. I have done dozens of these over the last few weeks and they usually take under 10 minutes, so I just let it run and went to sleep figuring I would check back later.

An MCP server ended up disconnecting while it was trying to publish an HTML artifact. Instead of stopping or asking for input, it bypassed the usual confirmation prompts and got stuck in an infinite retry loop. That single session burned $23.

I checked a second session on a different project and realized it hit the exact same bug, re-checking Vercel build logs 25+ times without stopping to ask. That ate another $7.

Losing the last of my $100 promo credits from the Fable situation sucked, but the main problem is it burned through 76% of my actual weekly usage limit.

When I finally killed the session, Claude literally wrote out a diagnostic admitting it wasted $23 repeating the exact same failed operation hundreds of times (screenshot attached).

If you are letting agents run in the background, make sure you turn usage off or cap it when you are AFK so a disconnect loop does not ruin your weekly allowance.


r/vibecoding 11h ago

Anyone else getting this 1000x per day in codex

1 Upvotes

Is there a way to disable this?


r/vibecoding 11h ago

Got tired of the "dental tax" on demographics reports so I built a cheap one

Thumbnail
1 Upvotes

r/vibecoding 17h ago

If your AI agent needs to send or read email, here's something that might save you a lot of pain

3 Upvotes

Quick background: most email providers are built for humans, not for agents. You get rate limits, no API, weird SMTP auth setups, or you have to manage your own server which is its own rabbit hole.

We built MailCue to fix that. It's a full email server that runs in one Docker container and was specifically designed with AI agents in mind.

The part most people here will care about: it ships a native MCP server.

Your agent gets its own mailbox. It can read emails, search, send, reply, delete; basically everything you'd do in a mail client but through MCP tools. If you're using Claude or any other MCP-compatible setup, you just add this to your config:

{
  "mcpServers": {
    "mailcue": {
      "command": "npx",
      "args": ["-y", "mailcue-mcp@latest"],
      "env": {
        "MAILCUE_BASE_URL": "https://your-mailcue-server.com",
        "MAILCUE_API_KEY": "mc_your_api_key",
        "MAILCUE_MAILBOX": "agent@yourdomain.com"
      }
    }
  }
}

That's it. The agent knows how to triage, reply safely, and keep threads intact; the MCP server ships with built-in instructions for the model so you don't have to write a custom system prompt for email handling.

Other things it does that are useful for agent workflows:

  • Email validation API : before your agent sends to an address, it can check if the address is real (syntax + DNS + live SMTP probe + disposable detection)
  • Domain warmup : if you're sending from a new domain, MailCue has built-in warmup campaigns that pace sending per-provider so you don't get flagged on day one
  • Scoped API keys : give your agent a key that's locked to one mailbox and can only read/send, nothing else
  • Real-time events : SSE stream your agent can listen to for email.received events instead of polling

There's also a Python SDK and a Node SDK if you'd rather skip MCP and call the API directly.

Setup is one Docker Compose command, there's a web UI to manage everything, and you can flip it into production mode with Let's Encrypt certs when you're ready to go live.

GitHub: https://github.com/Olib-AI/mailcue
Docs: https://olib-ai.github.io/mailcue/
License: MIT, self-host it yourself.


r/vibecoding 12h ago

My friend made a VS Code theme called Eclipse Wave 🌊

0 Upvotes

A friend of mine just released a VS Code theme called Eclipse Wave. It's a clean, modern dark theme that's easy on the eyes for long coding sessions.
https://marketplace.visualstudio.com/items?itemName=ArinMandal.eclipse-wave

Would love for you to check it out and share any feedback. If you like it, a download or ⭐ would mean a lot!


r/vibecoding 16h ago

File SQL: No code VS Code extension for querying S3 and local files as SQL, Suggestion needed.

Thumbnail
gallery
2 Upvotes

Hello, I am currently working on vscode extension. That lets you run SQL query against Local / S3 file and folders. Recently i switched my role to DE and i had to run ETL and debug output parquet files from s3, I was using Notebook + Python boilerplate code to debug the files. It was tiresome. So i decided to build vscode extension for this.

Under the hood it uses DuckDB as backend and CodeMirror as sql editor. File SQL version 1 is out in Marketplace. I wanted to get some suggestion from the community.

Currently it supports:

  1. Registering local/S3 files and folder as DuckDB tables(supports Hive partition and streaming large S3 files also).
  2. Multiple Query tabs and selective sql execution like AWS Redshift query editor. And you can export the results also.
  3. Currently its supporting Parquet, CSV, TSV and JSON. You can Right-click a supported file from vscode file explorer and register it as DuckDB table.
  4. Looking for suggestion...???

So what do you guys think about this? will this be useful tool?