90% of vibecoded saas are ready to get hacked, here's the data:

A Reddit user highlights the security risks of SaaS projects built with tools like lovable, bolt, and replit. The user demonstrates a vulnerability where an AI generation endpoint, such as /api/generate, can be exploited by making 10,000 requests, leading to charges for the provider without any protective measures. This post aims to raise awareness and help developers enhance the security of their applications.

This report uniquely details a specific vulnerability in AI generation endpoints, unlike general security warnings, by demonstrating how 10,000 requests can exploit a lack of protective measures.