A website with ~200 visitors a day got a $104,500 hosting bill.
A budget alert wouldn’t have stopped it. Alerts only send an email.
Here are the 5 limits to set before you launch your AI app :
29 million secret keys were leaked on GitHub last year.
Keys for AI services: up 81% in one year.
Most weren’t leaked by hackers. They were leaked by people building apps with AI.
5 checks before you share yours 👇
@DarayuthH The API key, by a mile. It's usually sitting right in the frontend code, visible to anyone. Close second: data that only lives on their laptop, so the live app "forgets" everything.
@RoburnaBuilders Both, honestly 😄 I built Utplava (https://t.co/alMpMX12hv) for exactly this. It puts AI-built apps online, and it flags exposed keys before the app goes live. And +1 on spend limits on day one. Adding that to the next list.
@Cristina_AC_X I run an agency too. Only consistency will get you results. People expect conversions overnight which is where all the arguments start. My experience says, clients who were consistent with ads had better sales. And of course, the product too plays a big role
1. Secret keys: never in your website's code
2. Settings: passwords live on the server
3. Your data: a real database, not your laptop
4. The padlock: https, always
5. A way back: undo a bad update in one click
On Utplava, all five are handled for you: https://t.co/alMpMX12hv
Built an app with AI? Check where your API key is.
AI tools often paste secret keys straight into your website's code. Anyone can see it with "View page source". Bots scan for them all day.
3 rules in 75 seconds
#VibeCoding#BuildInPublic
1. Keep keys out of your website. Store them as secret settings on the server.
2. Never push keys to GitHub. Use a .env file plus .gitignore.
3. Leaked one? Replace it now.
On Utplava, exposed keys are flagged before your app goes live. Free to try: https://t.co/alMpMX12hv
Built something with AI?
Putting it online shouldn’t be the hard part.
Live. Connected. Ready. Handled.
And when you want to change something, just ask your AI.
#buildinpublic#AI
A bakery owner used to wait 3 days for her web person to change one price.
Now she types “add a Christmas offer to my website” into her AI, and a minute later it’s live.
That’s the part nobody talks about. AI didn’t just make building easy. It can run your website for you too.
We built Utplava for exactly this
#buildinpublic #AI
My milkman now takes orders online. He built the website himself, with AI, in one evening.
The building part is solved. What stops most people is putting it online: hosting, servers, monthly fees.
That’s why we built Utplava. I made this 30-second story about it