Twitter/X

Shiri (@shiri_shh) says that after a year of celebrating rapid AI app shipping…

2026-07-31 · 15:25 UTC ·@shiri_shh ·0 min read

Brief

Shiri (@shiri_shh) argues that AI accelerated app shipping over the past year while security reviews were mostly skipped because a real security pass 'costs thousands and takes weeks.' Bolt.new claims to fix this by embedding an agent in the publish flow that scans, patches, confirms builds and adds rollback checkpoints, making agentic security the default and free.

Why it matters

Shiri (@shiri_shh) says that after a year of celebrating rapid AI app shipping, 'almost none' of those apps get security reviews; a proper security pass 'costs thousands and takes weeks,' so security is routinely deferred.

Key details

  • Bolt.new (@boltdotnew) built an agent into its publish button that 'scans, patches, confirms the build, and ships with a rollback checkpoint,' pitching 'SoTA agentic security' as the default and free—a 'security engineer into every Bolt project.'
Source evidence

we spent a year celebrating how fast AI ships apps.

nobody fixed the other half: almost none of it gets reviewed. A real security pass costs thousands and takes weeks, so it becomes "later." later never comes.

@boltdotnew just folded it into the publish button. the agent scans, patches, confirms the build, and ships with a rollback checkpoint.

vibe coding finally got its missing half.

bolt.new (@boltdotnew)

Today we're shipping a security engineer into every Bolt project.

AI made building faster. It made attackers faster too.

So we’ve made SoTA agentic security the default. For free. 🧵

Video

— https://nitter.net/boltdotnew/status/2083205470559650260#m