/research · monthly
State of AI-built app security
A monthly count of the security basics of apps built with AI: browser protections, HTTPS, files left open, secret keys in public code and the services behind them. Built from 7IT's own checks. Counts and percentages only; no app is ever named.
Latest edition
October 2026, the first edition ›
93.4%
of apps ship with no Content Security Policy
3 of 7
Median number of the seven standard browser protections
89.5%
of apps enforce HTTPS with HSTS
61.7%
of apps name a Supabase project in the code they send
Every edition
A new edition comes out on the first of each month. All 7IT research.