Vibe coding: productivity and cyber risks

The way we build technology changed radically in 2025. What once required weeks of Photoshop for artwork or months of complex code for an application now happens in seconds through a natural conversation with Artificial Intelligence. We've entered the era of Vibe Coding .

But while productivity reaches unprecedented levels, a critical question arises for managers and developers: where does the "good vibe" end and where does the cyber risk begin?

In this article, we explore the key insights discussed on the Builders Podcast with Bruno Caldas , Cybersecurity Director at Skyone, on how to manage this unstoppable phenomenon without hindering business growth.

What is Vibe Coding?

The term "Vibe Coding" describes the software development process where the barrier of syntax and technical language is replaced by natural language. It's the democratization of development: any business person, equipped with a good prompt and basic logic, can bring an application to life in minutes.

This paradigm shift eliminates historical obstacles, such as the need for fluency in English or years of calculus studies to create business solutions. However, this ease brings with it a dangerous phenomenon: Shadow AI .

The danger of Shadow AI and the invisibility of data

Just as Shadow IT marked the era of SaaS (software contracted without IT approval), Shadow AI represents the hidden use of generative artificial intelligence tools within corporations.

The flow is fast and risky:

1. The user inputs sensitive company data into a public AI to generate a solution.
2. The code is generated in seconds and deployed to production via copy-paste , without any editing or auditing.
3. Information security loses visibility into the attack surface, creating vulnerabilities from "ground zero".

As Bruno Caldas points out, traditional security tools cannot keep up with the speed of ten people creating prompts simultaneously. The solution is not prohibition, but a change in culture .

Strategies for safe development with AI

For Vibe Coding to be an enabler and not a bottleneck, companies need to adopt intelligent layers of protection. Here are the main recommendations for companies of all sizes:

1. AI vs. AI: Use technology to validate creation

If you use AI to create, you should also use it to audit. The process recommended by experts involves:

• Generate the code or architecture in a tool.
• Submit this code to a second AI (preferably paid and in a controlled environment) with the command: “You are a security architect. Analyze this code, look for vulnerabilities, and suggest fixes .

2. Human in the Loop

AI doesn't discover what we need on its own; it responds to human commands. Therefore, ultimate responsibility for the code cannot be outsourced to the robot. Human expertise remains the primary pillar of cybersecurity.

3. Communication as a business enabler

Security shouldn't be a systematic "no," but a secure "how." The secret lies in presenting the business benefit: "I spend 4 hours on this task, but with AI I can do it in 40 minutes. How can we create the guardrails so I can use this tool without exposing the company? "

Read also: Vibe Coding: the AI ​​revolution that is redefining the software market

The new profile of the technology professional

The rise of Vibe Coding is redefining careers. In the past, security professionals were "Swiss Army knives" who configured firewalls and worked with operating systems simultaneously. Today, the market demands specialization and, above all, respect for the learning curve.

For those who wish to pursue a career in cybersecurity or technology in this new era, the advice is clear:

• Don't skip steps: understand the fundamentals of networking, operating systems, and development before specializing.
• Master AI as a learning tool: use intelligent chats to unravel complex topics, learn new languages ​​or programming languages, but remain inquisitive.
• Focus on understanding, not just execution: the problem isn't using AI code, but not understanding what it does.

Conclusion: Security is the foundation of innovation

We are experiencing a historic leap driven by Generative AI, cloud computing, and automation. Companies that ignore Vibe Coding lose competitiveness; companies that adopt it without governance lose credibility.

Modern cybersecurity should be the foundation that sustains the continuity and trust necessary for innovation to happen rapidly, but securely.

Do you want to delve deeper into this conversation?

The full discussion about the impact of Vibe Coding, the difference between hackers and crackers , and how AI is transforming the job market is available on our podcast.

🎙️ Listen to the full episode now on Spotify

Written by Skyone