Rahmat Wibowo posted a security and SDLC audit claiming a public-facing government procurement platform had 13 vulnerabilities and 9% SDLC maturity, attributing failures to 'vibe coding', publicly naming developers without disclosing who commissioned the audit or why.

The Hidden Cost of "Vibe Coding": A Comprehensive Security & SDLC Audit | just completed a detailed security and SDLC analysis on a public-facing procurement audit platform handling sensitive government data. The findings are eye-opening, What | Found: @ 13 Security Vulnerabilities + No authentication (APIs completely open) + CORS misconfigured to accept any origin + Zero rate limiting (vulnerable to scraping/DoS) + Information disclosure at every layer @ 9% SDLC Maturity (Professional standard: 70%+) + 0% test coverage (untestable codebase) + No CI/CD pipeline (manual deployments) + No monitoring/alerting (can't detect issues) + No error handling strategy + Plain JavaScript (no type safety) The Real Cost: This is what happens when "vibe coding” (building intuitively without formal processes) meets a public platform with sensitive data. The team built something smart—excellent data analysis and algorithms. But they skipped: + Tests (can't verify correctness) + Code reviews (security issues slip through) + Monitoring (production issues go undetected) + Documentation (knowledge locked in heads) Recovery Path: + 6 weeks to fix critical issues + Data breach liability until authentication is, implemented The Lesson: Every project starts with good intentions. But without SDLC discipline, technical debt compounds faster than code quality improves. By the time you realize the problem, you're looking at months of firefighting. The fix? Start with security and testing from day one. It's cheaper to prevent than to remediate. Full Analysis: 31-page comprehensive audit report available. Abil S. Abil Sudarman School of Artificial Intelligence M. Alif R. Ardian D. The project was made by : Joko Priyono Abil S. Moch Rafi Adnan Setiadipura #SoftwareEngineering #Security #SDLC #CodeQuality #AppSecurity #DevOps #BestPractices #TechDebt