Blog

Security notes and real cases from auditing AI-built apps.

• I let an AI agent build a SaaS blind. Here's the cross-tenant leak it shipped.

  July 15, 2026

  I had an AI agent conceive, spec, and code a full SaaS with no code review from me — then audited what it shipped. It looked done. It leaked one account's data to another. Here's the experiment and the finding.

  Read →