I Vibe Coded a Security Tool and It Found Bugs in Its Own Code

Everyone's building apps with AI. Not everyone's thinking about what happens when those apps get hacked. Anshuman has spent over a decade in application security, and he's watched the vibe coding wave hit the industry with one nagging question: who's securing all of this? In this engaging conversation, Anshuman Bhartiya, the AppSec tech lead at Lyft, discusses his journey in the cybersecurity field and the development of Secure Vibes, an open-source tool designed to help developers identify security vulnerabilities in their applications. The discussion delves into the role of AI in cybersecurity, the importance of context engineering, and the advantages of a multi-agent system architecture. Anshuman emphasizes the need for user-friendly security solutions and the potential for community contributions to enhance the tool's effectiveness. He also emphasized the importance of context in AI development, the introduction of fixer agents for vulnerability remediation, and the philosophical shift required in the security landscape as AI continues to advance. The discussion also touches on the concept of cyber reasoning systems and their potential to automate vulnerability detection and remediation. Take Aways - AI is reshaping the cybersecurity landscape. - Building open-source tools is essential for community support. - Secure Vibes was created to address personal security challenges. - AI can help mitigate the shortage of skilled professionals in security. - Context engineering is crucial for effective AI applications. - Determinism in AI can be achieved through structured workflows. - User experience is vital for the adoption of security tools. - Community contributions can enhance the development of open-source tools. Scaling solutions requires community support and human oversight. - Traditional SaaS tools often generate false positives due to their rules-based nature. - Benchmarking against its own codebase validated SecureVibes' effectiveness. - The future of software engineering may not require traditional coding skills. - Context engineering is crucial for AI to produce effective code. - Fixer agents can automate the remediation of identified vulnerabilities. - Security engineers may evolve into orchestrators rather than traditional coders. - AI's role in security should focus on enhancing human capabilities. - Vulnerability management needs to shift towards proactive secure code generation. - Cyber reasoning systems can automate vulnerability detection and remediation. Connect with our guest: https://www.linkedin.com/in/anshumanbhartiya/ Resources Mentioned In Our Chat Learn more about SecureVibes: https://securevibes.co/ https://github.com/anshumanbh/securevibes Learn more about Vulnvibes https://www.anshuman.ai/posts/vulnvibes-intro https://github.com/anshumanbh/vulnvibes 📌 Subscribe to AI Cyber Magazine for more conversations at the intersection of AI and cybersecurity. ˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍ ✅ For Business inquiries ►[email protected] ˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍ ✅ 𝐎𝐭𝐡𝐞𝐫 𝐕𝐢𝐝𝐞𝐨𝐬 𝐘𝐨𝐮 𝐌𝐢𝐠𝐡𝐭 𝐁𝐞 𝐈𝐧𝐭𝐞𝐫𝐞𝐬𝐭𝐞𝐝 𝐈𝐧 𝐖𝐚𝐭𝐜𝐡𝐢𝐧𝐠: 👉 https://www.youtube.com/watch?v=z-vY-r654bY 👉 https://www.youtube.com/watch?v=OWoWWJmlfNs 👉 https://www.youtube.com/watch?v=9EhlSHIBb-4 👉 https://www.youtube.com/watch?v=JoMumubmpBg ˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍ 𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫: Copyright Disclaimer Under section 107 of the Copyright Act of 1976, allowance is made for "fair use” for purposes such as criticism, comment, news reporting, teaching, scholarship, education, and research. Fair use is a use permitted by copyright statute that might otherwise be infringing. ˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍ 🔎 𝐑𝐞𝐥𝐚𝐭𝐞𝐝 𝐏𝐡𝐫𝐚𝐬𝐞𝐬: Anshuman Bhartiya,Secure Vibes,AI in cybersecurity,application security,multi-agent systems,vulnerability scanning,context engineering,open source tools,AI technology,AI,SaaS tools,vulnerability management,software engineering,security engineering,future of coding,AI security,AppSec,secure coding,AI coding,cybersecurity,software security,DevSecOps,AI development,multi agent AI,cybersecurity podcast,AI programming ˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍ #️⃣𝐇𝐀𝐒𝐇𝐓𝐀𝐆: #cybersecurity , #AppSec, #AISecurity, #SecureCoding, #DevSecOps, #ArtificialIntelligence, #SoftwareDevelopment, #OpenSource, #Programming, #techpodcast ˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍˍ ►Like This Video. ►Share this Video with your friends. ►Subscribe to the channel if you haven't already.