u/RobertBiro

I started building a website security scanner 9 months ago, to improve my vibe coding skills. Back then there were no scanners that focused on vibe coded apps. Today there are more and more.

Mine is built around the idea of making the issues as easy as possible to fix.

I'd like to know what you think of my take on a web security scanner: guardduck.co. Is it clear? Is it helpful?

Happy to answer any questions.

After 15 years in design, updating my portfolio and my resume is still a pain, something I avoid doing until it's necessary. And by that time, I often forget what I wanted to write into it. I have often called myself "a shoemaker without shoes".

I'm curious how it goes for others. Do you update your portfolio regularly, or only when prompted? Which part is the hardest about updating (if any)? And do your portfolio, resume and LinkedIn stay consistent with each other, or do they drift apart?

I'm looking into how people manage their resume during a job search (I'm at the research stage of a product idea).

When you last updated your resume, what prompted it, and which part was the hardest (or is updating it straightforward for you)? I'm also curious whether you keep separate versions for different roles? And, do you have a personal website or portfolio, or is LinkedIn plus the resume enough for you?

I'm looking into how professionals keep their resume and personal site up to date (I'm at the research stage of a product idea as I'm trying the Lean Startup approach before coding).

I'm curious how this actually goes for others. When you last updated your portfolio, what prompted it? How long did it take, and which part was the most cumbersome? And if you somehow keep the site, the resume and your LinkedIn consistent with each other, how do you do it (do you have a system, one source file, a tool, or plain discipline)?

I'm looking into how professionals actually keep their resume and personal site up to date (I'm at the research stage of a product idea, so honest answers help me more than polite ones).

I'm curious about: do you have a personal site or portfolio, and when did you last touch it? How many versions of your resume exist on your disk right now? And whatever the last update was, which part of it was the most cumbersome?

Hi everyone, I'm a product designer with 15 years of experience, and I build my own products with Claude Code. One of them is GuardDuck, a securityheaders alternative for vibe coders. Hand your AI a one-line prompt, it pulls the security findings back as markdown and helps you fix them.

https://guardduck.co

The limitation up front: it checks websites from the outside, so it's good at headers, TLS, exposed files and leaked keys. It does not see database rules, auth logic, or app permissions. So the classic case where a logged-in user reads someone else's data by changing an ID in the URL is invisible to it.

When I talked to vibe coders, security wasn't a concern for them until real users or payments showed up, and a few said that at that point they'd rather hire a person than run a tool.

So the question I can't answer is, is a free, external scanner useful to vibe coders, or am I solving a problem that doesn't exist?

Roast my positioning, scope, and/or the whole premise. I'd rather hear it now.

I have been building a website security scanner called GuardDuck, and I'm looking for some honest feedback.

The idea is simple: scan your website, find security issues, and make the results easier to act on. There are two ways to use it:

• View the report online like a traditional scanner
• Prompt your AI assistant to check for you and explain the scan results

I'm curious which experience feels more useful (or if neither does)

A few things I'd like feedback on:

• Does the scanner find things you care about?
• Are the results clear and actionable?
• Do you prefer the online report or interacting with it through AI?
• What would make this more useful for you?

It's free and doesn't require an account. Let me know what you think.

Try it here: https://guardduck.co