Source: https://ailoot.ai/blog/en/topics/website-app-delivery/ Canonical: https://ailoot.ai/blog/en/topics/website-app-delivery/ Language: en # Build and launch websites and apps Take a website or app from requirements to implementation, testing, security checks and deployment with a clear path to rollback. Start with one working user journey, then add the screens and integrations it needs. Check responsive layouts, access controls and production behavior before expanding the release. [Markdown](https://ailoot.ai/blog/en/topics/website-app-delivery/index.md) - [**How to Build an Animated Website in Claude Code in an Evening** Rules against template-like design, visual directions, GSAP, accessibility, and performance testing for an animated website in Claude Code.](https://ailoot.ai/blog/en/animated-website-claude-code/) - [**Astro or Next.js: Which Should You Choose for an AI-Built Website in 2026** A comparison of Astro and Next.js for a website built by an AI agent: purpose, structure, hosting, cost, and learning curve. Includes a scenario-based choice table.](https://ailoot.ai/blog/en/astro-vs-nextjs-for-ai-built-sites/) - [**Is It Safe to Give Claude Code Access to Your Data in 2026** In-depth analysis: Is it safe to give Claude Code access to your data in 2026?](https://ailoot.ai/blog/en/claude-code-data-access-safety/) - [**Vibe Coding Security: How to Protect an AI-Built App** How to prevent an AI-built app from being hacked: the Lovable and Tea leaks, protecting secrets and keys, RLS, agent permissions, and a security checklist before publication.](https://ailoot.ai/blog/en/vibe-coding-security/) - [**AI deleted the database: a 7-minute recovery plan** What to do after data deletion: stop the agent, document the incident, use git reflog, PITR, snapshots, and file recovery. Examples and safeguards.](https://ailoot.ai/blog/en/ai-deleted-database-recovery/) - [**I built a product with AI—how to make improvements without breaking what works** Safe product maintenance after launch: git, rollback, staging, secret protection, hosting, backups, and upkeep. All six prompts are preserved.](https://ailoot.ai/blog/en/ai-product-maintenance-after-launch/) - [**What Is Astro and Why Use It for an AI-Built Website in 2026** Astro in simple terms: what this framework is, how it differs from Tilda, what kinds of sites it suits, and why you need it if AI is building your site.](https://ailoot.ai/blog/en/astro-framework/) - [**Vulnerability in Claude Code GitHub Action: What to Update and How to Protect Your Repo** Analysis of the claude-code-action vulnerability before v1.0.94: workflow checks, tool restrictions, least-privilege tokens, and CI/CD protection.](https://ailoot.ai/blog/en/claude-code-github-action-security/) - [**Claude Design: A Guide and Five Practical Scenarios** Connect Claude Code to Claude Design: export the design package, paste its ID into your project, and implement components. Includes features and limits.](https://ailoot.ai/blog/en/claude-design-guide/) - [**Codex Sites: Internal Tools and Service Limitations** How Codex Sites, D1, and R2 work, who an internal site is for, how it differs from public site builders, and which limitations to consider.](https://ailoot.ai/blog/en/codex-sites/) - [**Coolify and Claude Code: Deploy a Project to Your Own VPS** Installing Coolify, connecting GitHub, deploying Next.js, domain and HTTPS, MCP, VPS requirements, and troubleshooting. Dollar-denominated technical prices and original limitations.](https://ailoot.ai/blog/en/coolify-claude-code-deploy/) - [**Security Agents and Rollouts in Cursor: Security Checks and Release Monitoring** How to enable Security Reviewer, Vulnerability Scanner, and Rollouts in Cursor Automations: triggers, usage from the team pool, plans, and how they differ from Bugbot.](https://ailoot.ai/blog/en/cursor-rollouts-security-agents/) - [**Website Design with an AI Agent: Google Stitch and Claude Code** A complete manual Google Stitch to Claude Code workflow: export HTML/CSS, assemble DESIGN.md from local files, build and verify a page, and handle an unresolved MCP authentication step.](https://ailoot.ai/blog/en/google-stitch-claude-code-design/) - [**How to Open Your Site to ChatGPT, Claude, and Perplexity Search Crawlers** Names of search and training crawlers, a complete robots.txt example, sitemap, text availability, and citation limitations.](https://ailoot.ai/blog/en/ai-search-crawlers-robots-txt/) - [**How to check AI-generated code if you can’t read code: 7 checks for non-programmers in 2026** AI wrote the code, but you don’t know how to read it? A ready-to-use checklist of 7 checks and prompts to catch broken code and security holes before publication.](https://ailoot.ai/blog/en/check-ai-generated-code/) - [**How someone else’s repository hacks Claude Code in 2026: 7 protection rules** Four documented indirect prompt-injection paths through repositories, GitHub content, Sentry events, and MCP metadata, with primary research and practical containment limits.](https://ailoot.ai/blog/en/malicious-repository-claude-code/) - [**Astro Site Through Claude Code: From Folder to Publication** Step-by-step guide: how to build a site with Astro through Claude Code without knowing how to program. What to install, which command to use to create a project, and how to publish it for free.](https://ailoot.ai/blog/en/astro-site-with-claude-code/) - [**Kimi Code Never Ask: modes and dangerous commands** In Never Ask mode, Kimi Code runs rm -rf and shutdown without asking. How do the 3 modes differ, and how can you prohibit a dangerous command in config.toml?](https://ailoot.ai/blog/en/kimi-code-never-ask-mode/) - [**FrontierCode Diamond: 13.4% mergeable patches on 50 hard tasks** The June 2026 FrontierCode results: 13.4% on Diamond’s 50 hard tasks versus 51.8% on Extended, and how to inspect an AI-generated patch.](https://ailoot.ai/blog/en/frontiercode-benchmark-mergeable-ai-code/) - [**Images and fonts in a product: sources and licenses** Unsplash, Pexels, Google Fonts, and paid licenses: terms of use, attribution, and checking the rights for each file.](https://ailoot.ai/blog/en/images-fonts-licenses/) - [**GitHub Code in a Commercial Product: Licenses and What to Check** Permissive licenses MIT, Apache, and BSD, copyleft GPL/AGPL, the absence of a LICENSE file, and checking the origin of code added by AI.](https://ailoot.ai/blog/en/github-code-commercial-licenses/) - [**Website Design with an AI Agent: Claude Code and Refero DESIGN.md** Refero Styles design context: DESIGN.md structure, choosing a visual system, importing it into CLAUDE.md, four steps to create a page, and common mistakes.](https://ailoot.ai/blog/en/claude-code-refero-design-md/) - [**Security review in Claude Code: step-by-step guide and GitHub Action automation in 2026** How to check the security of a vibe project with /security-review in Claude Code. Setup steps, a GitHub Action template, 6 types of vulnerabilities, and honest limitations.](https://ailoot.ai/blog/en/claude-code-security-review/) - [**utm\_source=chatgpt.com: how to measure traffic from ChatGPT** UTM tag and referrer, a segment in Metrika, landing pages, GA4, and the roles of OAI-SearchBot, GPTBot, and ChatGPT-User.](https://ailoot.ai/blog/en/utm-source-chatgpt-com/) - [**Vercel: Environment Variables Without .env in Git** Environment Variables, Development/Preview/Production, a new deployment, and safely checking keys in Next.js without passing secrets to the browser.](https://ailoot.ai/blog/en/vercel-environment-variables/) ## Ailoot · The company and its project portfolio Ailoot combines established operating experience, a large client base, stable service and ongoing KPI control. The company and its project portfolio: millions of customers; monthly sales in the billions. Ailoot brings that operating experience to API access for AI features in customer products, agents, applications and automations.