A vibe-coded app is software built mainly with AI-generated code and natural-language prompts, with limited manual design or security review. The workflow can speed up development, but it also increases the chance that the code contains ordinary flaws such as broken authorization, exposed secrets, unsafe input handling, or missing rate limits.
In cyber security, the term matters because attackers do not need new exploits when old mistakes are reproduced at machine speed. A generated app may look functional while failing to check permissions on the server side, leaking keys in logs or code, or letting repeated requests exhaust resources and trigger denial of service. Defenders treat vibe-coded software as untrusted until it passes code review, secret scanning, testing for access-control failures, and validation of throttling, timeouts, and other resource guards.