State of AI-built app security
A monthly count of the security basics of apps built with AI: browser protections, HTTPS, files left open, secret keys in public code and the services behind them. Built from 7IT's own checks. Counts and percentages only; no app is ever named.
- 93.4%of apps ship with no Content Security Policy
- 3 of 7Median number of the seven standard browser protections
- 89.5%of apps enforce HTTPS with HSTS
- 61.7%of apps name a Supabase project in the code they send
Every edition
A new edition comes out on the first of each month. All 7IT research.
Launch Review
Your AI built it. Nobody checked it. I will.
A senior engineer goes through your live app and tells you what is leaking, what is broken and what to fix first, with the exact prompt that fixes it. Written report in 48 hours.
- Fixed price
- Database rules, keys, payments, email
- Money back if nothing needs fixing