How to secure Windsurf AI Applications - Secure Vibe Coding Webinar

🔐 Securing AI-Assisted Applications with Windsurf IDE | Aikido Security Webinar

In this in-depth webinar, Mackenzie Jackson, security advocate at Aikido Security, walks through critical strategies for securing applications built with AI-assisted tools—specifically using the Windsurf IDE.

Discover how AI coding tools like Windsurf can accelerate your development—but also expose you to new and serious security risks. Learn about secrets management, authentication pitfalls, authorization design flaws, and how to integrate security tools into your dev process.

This session is packed with real-world examples, live demos, and practical tips you can implement immediately to protect your projects from the most common vulnerabilities in AI-generated codebases.

🔗 Get the Security Checklist: https://www.aikido.dev/blog/vibe-check-the-vibe-coders-security-checklist

⏱ Chapters
00:00 – Welcome & Overview

01:04 – What Is Aikido Security?

02:36 – AI Coding: Good, Bad, or Tool?

04:05 – Connecting Windsurf to GitHub

06:09 – Core Security Focus: Secrets & Auth

07:37 – Secrets Detection Explained

10:01 – How Secrets Get Exposed

14:00 – Secrets Detection Tools & Demo

18:02 – Authentication & Authorization Flaws

25:51 – Role-Based Security with Supabase

29:34 – Dynamic Application Security Testing (DAST)

32:49 – Software Composition Analysis (SCA)

43:23 – Static Application Security Testing (SAST)

45:00 – Wrapping Up: Your Security Checklist

Видео How to secure Windsurf AI Applications - Secure Vibe Coding Webinar канала Aikido Security