Forge is a security-audit tool I built for people who ship code with AI agents and don't have a security team. Two releases this week closed the loop between finding a problem and fixing it. Here's what changed.
The core audit UI now has a "Copy as prompt" button. It takes every failed check, pairs each finding with its fix, and turns the whole thing into a single ready-made prompt. Paste it into Claude Code, Codex, or any agent that works on your codebase, and it can start fixing the issues directly.
Two things matter here. Checks that already passed are left out, so the prompt is only the work that's actually left. And the prompt is generated in English regardless of what language you read the site in — because that's the language coding agents follow most reliably.
You can now open an audit and press "Copy link" to get a URL anyone can open without signing in. They see that one report and nothing else of yours. The link lives for 24 hours — and copying it again within that window extends the same link another 24 hours.
The bigger win: "Copy as prompt" now includes that link too. So when you hand the prompt to an agent, the agent can also read the full report behind it, not just the compressed list of fixes.
Why this matters for VibeCoders.
The old flow for a solo dev or VibeCoder was: find a scanner, get raw output you can't read, figure out what's real, fix it by hand. Forge now collapses that into: run an audit, copy the prompt, let your agent fix it, and share the report link with someone who needs to see it. No codebase access required — Forge works as a black box and simulates a real attacker, so you never hand the tool your source.
Both features are live now and free while Forge is in beta. Would love feedback from anyone shipping fast without a security team.