Hey Product Hunt! 👋 Qutub here from Perfai Security. Over the last 18 months, I've found vibe-coders — including myself — opening Replit, Lovable, Cursor, Copilot, Claude Code (any of the various AI-coding tools) and within a few hours, they have something that looks and functions like a real product, with login, dashboards, payments, database records, admin screens, user roles, and the foundations for handling customer data. And that's awesome because the app looks finished! But that's when the serious builders ask: "Is this actually safe to put on the internet?" The Problem Every app has permissions about who can do what. Customer X should only see X's own data, not someone else's. A normal user should not gain admin access. These permissions are also called access controls. The problem is that even a small app will have thousands of access controls. Here is the simple math: 6 Roles x 10 Data x 100 Actions => 6,000+ access controls These access controls live in three places: the app pages people click on, the API endpoints (where the app sends and gets data), and the database (where the data is stored). AI tools build apps fast. But they skip most of these checks in all three places. That is how data leaks and hacks happen. The Solution: Perfai Security Autonomous security for AI & vibe-coded Apps You just paste your app's URL. No code needed. Then our AI agents do three things: - Vision Agent: Learns your app. It navigates through every page, API, and action, with every app role. - Security Agent: Tests every access control. It checks the pages, workflows, API endpoints, and the accessible database. It finds the doors that are open but should be locked. - Fix Agent: It tells your AI-coding tool (Replit, Lovable, Cursor, Claude Code, etc.) how to fix these vulnerabilities, and verifies the attack paths are patched. It also keeps watching. Every time you update your app, a locked door can open by accident. We check again after each update, and tell you what broke before anyone else can find it. And since all of this is done in minutes (relative to what would previously take dev teams weeks to accomplish), the entire loop can be run again with every new update. Direct Benefits of using Perfai Security? - You save $100K+ in breach costs. - Find vulnerabilities no other tools cover. - Find live issues before users, attackers, or bug bounty hunters do. - Secure your apps against the excessively growing attack-surfaces. - Protect enterprise deals and funding rounds by showing what is being covered, continuously. - Reduce compliance and privacy risks. - Save $10K–$40K in manual testing time and effort by automating. - Prevent customer churn and reputation damage associated with logic issues. Early Traction: So far we have secured 4,000+ apps. We found and fixed 28,400+ vulnerabilities. We saved our customers $27.5M in bug bounties. And for our contributions to the overall security field, we have been awarded Innovator of the Year by CloudX. Product Hunt Offer: For the Product Hunt community, Perfai Security's Pro-plan is offered at 50% discount with the discount code Discount Code: PRODUCTHUNT50 You can start testing by pasting your app URL — no source-code access required — and getting your first vulnerability results within minutes. Thanks for checking out Perfai Security. Build fast. But don’t ship blind.

Point your AI agent at Gate. Inherit prompt-injection defense, secret scanning, and a verifiable audit trail. Gate includes prompt compression and caching so you can reduce token usage by 20-40% without changing model output. In AI security benchmarks, Gate ranks #1 across 16 public prompt-injection datasets. Keep your Claude or ChatGPT subscriptions and route them through Gate, or choose from 100+ models pay-as-you-go. Setup is easy: no code changes with our desktop app.. Product Hunt launch with 129 votes and 22 comments.