Is Emergent AI Safe? Independent Pentest Findings

Astra's independent pentest of an app built on Emergent, the prompt-to-app platform, confirmed 41 vulnerabilities: 0 Critical, 7 High, 23 Medium and 11 Low, with the High findings clustering around broken object-level access. Astra reported that changing IDs exposed customer records, a pagination bypass allowed a full database dump, password hashes leaked, session tokens stayed valid after logout, CORS reflected arbitrary origins while allowing credentials, and tokens lived up to 168 hours in localStorage. The app was built from one security-explicit prompt on a paid plan in Q2 2026; Emergent, which announced a $70 million Series B in January 2026 and reports more than 5 million users, received no advance notice, and Astra said the study argues for testing what vibe-coding builds rather than against using Emergent.

Is Emergent AI safe? A fair question indeed for anyone about to ship a customer-facing app from emergent.sh. Or even outside of that. Emergent is one of the fast-blooming leaders in turning plain-language prompts into full-stack web and mobile apps. What we checked is how their security holds up. Consider this a security-focused Emergent https://emergent.sh/ AI review. We gave four AI coding platforms the same security-explicit prompt, then attacked each app. Two disclosures before the findings First, Emergent is a paying Astra customer; its application was built on a paid plan, the other three on free tiers. Emergent’s free tier produced only a minimal app, so a paid plan was the only way to match the others. A paid plan may also bring a more capable model or higher limits, so read Emergent-specific numbers with that in mind. Second, we funded and ran this study independently, and no platform got advance notice or special access. Is Emergent AI safe? What our pentest found We confirmed 41 vulnerabilities in the Emergent app: 0 Critical, 7 High, 23 Medium, and 11 Low. The High findings matter most, because they cluster around broken object-level access: - Customer records exposed by changing IDs - A pagination bypass that allowed a full database dump - Leaked password hashes - Session tokens that stayed valid after logout We also confirmed CORS that reflected arbitrary origins while allowing credentials, and tokens that lived up to 168 hours in localStorage. Broken object-level access turns one ordinary account into a window to everyone’s data, and nothing on the surface hints at it. Emergent security in context We tested one app, built from one prompt, in Q2 2026. Platforms update often, so your app may differ. We didn’t set out to rank platforms, and we aren’t arguing against using Emergent. We’re arguing for testing what vibe-coding builds. Check your Emergent app in 5 minutes Run these checks before you launch: - From a different origin, run fetch url, { credentials: ‘include’ } against your API. It should throw a CORS error. - Request /api/users without logging in. It should be blocked, not return password hashes. - Reuse a captured token after logging out. The server should reject it. - Decode your token at jwt.io and check exp. It shouldn’t last days, and it shouldn’t sit in localStorage. - As a low-privilege user, request another user’s record by ID. You should get a 403 or 404. Emergent security shifts every time you prompt a new feature, so re-test after major changes. Autonomous pentesting https://www.getastra.com/autonomous-pentesting can repeat these attacks on every release. The full report includes the complete Emergent checklist and a corrected prompt, ;download it here https://www.getastra.com/reports/vibe-coding-security-risks-study . FAQs Is Emergent AI safe? Treat Emergent AI like any AI app builder: it’s well suited to prototyping, but test your app in depth before you bring in real customer data. Security depends on what your prompts actually specify and what your code enforces. Is Emergent AI legit? Yes. The company announced a $70 million Series B in January 2026 and reports more than 5 million users. Funding and user numbers don’t speak to how secure any individual app is, so the security checks still matter. How to secure my Emergent app? Name your public routes and require authentication on everything else. Restrict CORS to an explicit allowlist and never expose password hashes. Shorten token lifetimes, revoke tokens on logout, and test each rule from outside the app.