Build safer websites and apps in Macaly

Macaly helps people build websites and apps with AI, including people who have never written a line of code or worked in software development. Getting a working project off the ground, wiring up a database, or integrating payments used to mean hiring a developer. Today it takes a chat with an AI agent.

Security is the next step on that path. In professional software development, a security review is a standard part of the process, and Macaly now brings that to every user project.

The security audit reviews your project's source code, explains the results in plain language, and helps you fix anything it finds.

Security starts before your first prompt

Every project you build in Macaly sits on secure foundations from the very beginning. Data is encrypted in transit and at rest, and each project gets its own isolated database, which runs alongside hosting on servers in the EU. The Macaly agent itself builds sites and apps following established security practices.

Published projects also get automatic protection against malicious traffic. On top of that, Macaly keeps an eye on known vulnerabilities in the frameworks your projects are built on. If your project is running a version with a known security flaw, the agent helps you move to a newer one.

A review you can actually understand

Before you put your site or app in front of real users, it's worth checking how secure it is. Macaly now helps you do that right inside your project.

The security check covers eight areas that can affect your visitors and their private data. Macaly goes through your project's source code asking the same kinds of questions a security expert would. Could someone reach another person's data just by guessing a URL? How does login work? What happens to the text and files visitors submit through forms? Is private information being stored somewhere it shouldn't be?

Results appear in a clear overview. You can see at a glance which areas Macaly tested and what it concluded. For any issues found, you also get the context: what could happen, who it affects, and how to tighten things up. A detailed technical report comes with the results.

Macaly can fix most of what it finds on the spot. The agent backs up your project first, makes the changes, tests them, and confirms your app still works.

You can request a security audit before publishing or at any point while you're building. The first check in every chat is free, including the fixes it suggests.

What the security check can't do

The security check inside Macaly works as an AI-assisted code review. That makes it thorough, fast, and easy to repeat regularly. What it doesn't replace is penetration testing, professional security consulting, or certification.

The check captures a snapshot at a single point in time, so it's worth running again after any significant change to your project. And a clean result means that in the areas the check reached, it found nothing concerning. That's the most any honest audit can promise, whether it's done by a person or by AI.

For details on the security check in Macaly, see the documentation. You can also read about how security works in Macaly and how to build secure apps in Macaly.