ACCORDING to the UK's National Cyber Security Centre, the head of the agency, Richard Horne, urged security professionals at RSA Conference to “seize the disruptive vibe coding opportunity” to make software more secure, while stressing the need for rapid development of safeguards for AI code-generation tools. He argued that vibe coding, the use of AI-assisted software development, could reduce vulnerability if the AI tools are designed and trained from the outset to avoid introducing unintended weaknesses.
Delivering a keynote in San Francisco on 24 March 2026, Horne warned that while AI-generated code could pose risks, well-trained tooling and secure-by-design practices offer a path to a net positive for security. The NCSC’s Secure Vibe Coding Commandments call for integrating secure-by-default practices, a trust-but-verify approach with provable model provenance, AI-powered code reviews of all code, and deterministic guardrails to limit what code can do. They also emphasise securing hosting platforms and automating security hygiene across every piece of software.