About this episode
The episode features a live code audit of an AI-powered SaaS app, discussing security risks and best practices for non-technical founders.
This week on the Rogue Startups, Craig gets roasted. He brought in experienced software engineer Brandon Hancock after building the AI-powered SaaS app Outlier largely through “vibe coding,” so Brandon could audit the entire codebase live during the episode. The result? An honest but useful breakdown of what happens when non-technical founders ship fast with AI tools. Brandon digs into real security risks, common architecture mistakes, and the best practices every founder should follow when building AI-driven products. If you’re launching SaaS with tools like Next.js, Supabase, and Claude, or simply adding AI features to your existing product, this episode offers practical lessons on building faster without accidentally breaking everything. Check the episode out on YouTube to see Brandon dig through Craig’s code onscreen. Highlights from Craig and Brandon’s conversation: What “vibe coding” looks like when building a real production startup How a single exposed Supabase key can create major security risks Why row-level security is critical for protecting user data Using AI to audit code and uncover vulnerabilities in minutes Simple fixes that dramatically improve SaaS security Why…
People in this episode
Host: Craig
Guest: Brandon Hancock
Topics covered
- AI-driven products
- SaaS security
- code auditing
- vibe coding
- best practices
- software architecture
Keywords
- AI tools
- security risks
- code review
- SaaS
- architecture mistakes
- database migrations
- production mistakes
Mentioned in this episode
Organizations: Drizzle ORM
Products: Outlier, Next.js, Supabase, Claude
More episodes of Rogue Startups
- RS358: Your Design Sucks · March 18, 2026 · 54 min
- RS356: When to Pivot, When to Push w/ Jesse Hanley · March 4, 2026 · 1h 2m
- RS355: Code Velocity and the Future of SaaS · February 25, 2026 · 58 min
- RS354: The State Of Podcasting Heading Into 2026 · November 26, 2025 · 41 min
- RS353: Is This the Last Organic Marketing Channel · October 1, 2025 · 51 min
- RS352: AI Killed Traditional Marketing – Here's What's Next · September 24, 2025 · 50 min
Explore listener stats, chart rankings, contacts and more on the Rogue Startups podcast page.