Skip to content

Beginner · Self-paced · 6 lessons

AI app security basics for beginners

Recognize exposed secrets, missing permission checks and risky data changes before approving an AI suggestion.

Try the free sampleSee the curriculum

Who this is for

Builders adding accounts, databases or API integrations to their first app.

Before you start

A basic understanding of an app's frontend and backend. Use sample data and accounts you control.

How long it takes

The in-app lesson estimates total about 18 minutes. Repeat exercises at your own pace and allow separate time for the optional project. Finishing a drill is different from being ready to operate a production app.

The actual curriculum

These titles and summaries come from the same lesson catalog used in the app.

Security first

  1. 1.

    Read what you allow · ~3 min

    Catch a bad agent action at the Allow dialog — while it's still free to stop.

  2. 2.

    Secrets never in code · ~3 min

    Keep keys out of chats, code and screenshots — and rotate fast when one slips.

  3. 3.

    Spot dangerous commands · ~3 min

    Recognize delete-and-rewrite commands before they run — and demand a backup first.

  4. 4.

    Treat user input as untrusted · ~3 min

    Put the real input checks on the server — where nobody can skip them.

  5. 5.

    The server checks permissions · ~3 min

    Make sure 'who's allowed' is decided on the server — not by hiding buttons.

  6. 6.

    Give the least access needed · ~3 min

    Hand keys, agents and people exactly the access the task needs — nothing extra.

Put it into a small project

Inspect a demo app for client-side secrets and test whether two sample accounts can read each other's records. Record the expected denied requests.

This is a suggested practice assignment, not a claim that VibeGym automatically creates or hosts the app for you. Keep a working checkpoint and show the result to someone else before increasing the scope.

Start with an explanation

Read the related practical guide, then use our brief, debugging and review templates on your own project.

Access and next steps

The public sample and guides are free. All 36 in-app lessons are also free with an account, alongside one standard training session per day. Paid plans add unlimited training, mistake review and the full project challenge. AI coding tool subscriptions and hosting are separate. See plans and prices.

Start the free lessons →