Observed arrival · 2026-09-04

Septr, the bodyguard for vibe-coded apps

septr.dev Observed source

Editorial interest 79/100 Selection signal · not a rating of the site

A runtime security middleware tool for AI-generated apps, scanning requests and responses for exposed secrets, broken authorization, prompt injection, and other vulnerabilities.

Landing page captured for the 2026-09-04 issue.

Field notes

Septr presents itself as middleware that inspects both sides of an application request, with separate engines for secrets, authorization, PII, injection patterns, SSRF, quotas, and tenant-boundary leaks. Its example log records three concrete outcomes: a BOLA request rejected in 1.2ms, a Stripe secret scrubbed from a response, and a prompt-injection request blocked in 0.6ms. The page also lists 22 secret patterns, eight frameworks, and an npm installation path.

Observed signals

Read the marks

Editorial observations of this landing page, not a rating.

○OpenPublic substance visible

$PaidCommerce or pricing visible

✦PrettyNotable craft visible

●ProPolished or operationally mature

◎NicheUnusually specific use

One card from the complete issue

An Octave Below the Spacecraft

377,806 arrived 1,000 judged 998 catalogued Enter the complete issue