KulenDayz2026

28/08/2026, IT Park
Osijek, Croatia

A Bouncer Gang in the (Vibe) Coding Party

Even without AI, security in source code was a very challenging process. Reviews are long issues can easily be missed. And now we have vibe coding and it's nicer sibling, AI assisted coding. At any rate, coding is faster. So it's time to add some fast security reviews, assisted by the same AI that may be producing the issues. And because AI is known for a lot of hallucinations, let's pair it with a set of deterministic tools, empower devs to override the findings if necessary and track all these reviews. We start with the PR Bouncer. Here to check that your code is behaving on every PR. Then a Pit Boss, to get all the reports from the PR Bouncer and understand long term developer trends, knowledge (or lack thereof) and high risk repositories. Finally, Repo Shakedown, to automatically drill into the repos and identify exploits that the human engineering and security team can test, confirm and fix. Suddenly the company has a lot better view of what is happening security wise in the code, can have better educated discussions and focus training or standardize patterns.