Build safer websites and apps in Macaly

Macaly helps people build websites and apps with AI, including people who have never written a line of code or worked in software development. Building a whole site, wiring up a database, or integrating payments used to mean settling for an off-the-shelf solution or hiring a freelancer or agency. Today, AI is enough.

The security of sites and apps built this way is a fair thing to wonder about. When professionals develop software, a security review is a necessary part of the process. Macaly users can now do the same across all their projects.

The security audit reviews your project's source code, explains the results in plain language, and helps you fix anything it finds.

Security starts before your first prompt

Every project you build in Macaly sits on secure foundations from the very beginning. Data is encrypted in transit and at rest, and each project gets its own isolated database, which runs alongside hosting on servers in the EU. The Macaly agent itself builds sites and apps following established security practices.

Published projects also get automatic protection against malicious traffic. On top of that, Macaly keeps an eye on known vulnerabilities in the frameworks your projects are built on. If your project is running a version with a known security flaw, the agent helps you move to a newer one.

Macaly checks your project and fixes what's broken

Before you put your site or app in front of real users, it's worth checking how secure they are. Macaly now helps you do that right inside your project.

The security check covers eight areas that can affect your visitors and their private data.

Macaly goes through your project's source code asking the same kinds of questions a security expert would. Could someone reach another person's data just by guessing a URL? How does login work? What happens to the text and files visitors submit through forms? Is private information being stored somewhere it shouldn't be?

Results appear in a clear overview. You can see at a glance which areas Macaly tested and what it concluded. For any issues found, you also get the context: what could happen if you left it unfixed, who it affects, and how to tighten things up. A detailed technical report comes with the results.

Macaly can fix most of what it finds on the spot. The agent backs up your project first, makes the changes, tests them, and confirms your app still works.

You can request a security audit before publishing or at any point while you're building. The first check in every chat is free, including the fixes it suggests.

What the security check can't do

The security check inside Macaly works as an AI-assisted code review. That makes it thorough, fast, and easy to run regularly. What it captures, though, is a snapshot of your project at a single point in time. After any significant change, it's worth running again.

This check also doesn't replace penetration testing, professional security consulting, or certification. If your app handles personal data, or anything genuinely sensitive, we always recommend having its security reviewed by an expert.

For details on the security check in Macaly, see the documentation. You can also read about how security works in Macaly and how to build secure apps in Macaly.