Your App is Not Secure 🤯

@jordankodes

7.1K followers · usually 11.6K views a post

Views

70.6K

Likes

4.5K

Comments

38

Shares

592

Selling · SaaS › Developer Tool

Postman https://www.postman.com/ ↗

Why it worked

The video addresses a critical pain point for developers (app security) and provides a quick, actionable tip using a well-known tool (Postman). The offer of a comprehensive guide and a consultation further incentivizes engagement.

Summary

The video demonstrates how to test API security using Postman. It shows how to check if an API endpoint returns data to unauthenticated users, indicating a security vulnerability. The creator offers a guide to 20 security vulnerabilities and suggests scheduling a call for further assistance.

Structure

1Introduction to app security vulnerability
2Demonstration of Postman for API testing
3Checking for unauthorized data access
4Explaining the implications of a 200 response
5Call to action for security vulnerabilities guide and consultation

Product placement

The video shows the Postman website and interface, demonstrating how to use it for API testing.

Call to action

Original caption

postman api testing, backend security, api security tips, frontend is not security, row level security, backend authorization, prevent data leaks, software engineering security, web app backend, secure api routes

More from @jordankodes

Their other posts in the index, biggest breakout first.

Click the link in my bio and let's schedule a call.

On-screen text

Your App is Not Secure 🤯 BEEN SECURITY TRY SECOND HACKED. GO POSTMAN. PLATFORM POINTS. POSTMAN, TO API IF CORRECTLY, RETURN YOU'RE OF ACTUALLY THIS UNAUTHENTICATED QUEER SECURE 20 VULNERABILITIES, MY CALL.

Transcript

If you've been vibe-coding an app with security in mind, try this simple 5-second trick to see if you could get hacked. Step one: Go online and search for Postman. Postman is a platform that allows you to test your API endpoints. Login to Postman, put your request to GET and put the API URL right here. If you set up everything correctly, you should be seeing that you return nothing. If you're getting a response of 200, and you're actually getting this data back, this means that any unauthenticated user can query your database. If you want to make sure your app is secure, go over these 20 security vulnerabilities, click the link in my bio and let's schedule a call.