Documentation
Everything you need to secure your vibe-coded projects
Getting Started
Fix Templates
Every vulnerability BoringSec finds comes with a copy-paste fix prompt optimized for your specific AI coding tool. Fix critical issues in minutes, not hours.
Why Fix Templates?
Traditional security tools tell you what's wrong but leave you to figure out how to fix it. BoringSec gives you the exact prompt to paste into your AI tool — it knows your stack, your tool, and the specific fix needed.
Supported AI Platforms
Each fix template has a version optimized for how each platform works — Cursor needs project-context instructions, Lovable needs Supabase-aware fixes, Bolt needs serverless-compatible solutions.
Cursor
Full project context
Lovable
Supabase-aware fixes
Bolt.new
Serverless patterns
Claude Code
MCP-integrated
v0.dev
Next.js App Router
Windsurf
Multi-file edits
Replit
Environment secrets
What's Covered
Supabase Service Role Key Exposed
Moves the service_role key from client to server, creates API routes for privileged operations.
supabase-service-role-exposedEnable Row Level Security
Enables RLS on all tables, creates user-scoped policies, tests with anon key.
supabase-rlsAPI Keys in JS Bundle
Finds all exposed keys, moves to server-side env vars, creates proxy API routes.
bundle-exposed-keysInsecure Firebase Rules
Locks down Firestore and Storage rules, adds auth-based policies.
firebase-rulesMissing Content-Security-Policy
Generates a strict CSP header configured for your specific stack (Next.js, Vercel, etc.).
missing-csp.env File Committed to Git
Removes .env from git history, adds to .gitignore, rotates compromised credentials.
committed-env+ 36 more templates covering headers, XSS, injection, CORS, cookies, and more
How to Use Fix Templates
Run a scan
Scan your URL, repo, or code files from the dashboard or API.
View findings
Each issue has a "Fix" button or a link to the relevant fix template.
Select your platform
Choose Cursor, Lovable, Bolt, Claude Code, or any other supported tool.
Copy and paste
One click copies the full fix prompt. Paste into your AI tool and let it apply the fix.
API Access
Access fix templates programmatically via the REST API:
GET /api/v1/fix-suggestions/supabase-rls?platform=cursorReturns both built-in and community templates. See the API Reference for full details.