# Security and reliability prompts for coding agents

> Prompts for coding agents that harden a launch: security headers, auth, a secrets scan, rate limits, error tracking, uptime checks and database backups.

Canonical: https://abacklaunch.com/prompts/category/security
Last updated: 2026-10-26

Attention brings attackers and load as well as users. These prompts close the obvious doors before launch day.

- [Security headers and HTTPS, set once for every response](https://abacklaunch.com/prompts/security-headers) - Set HSTS, CSP, framing, MIME and referrer headers on every response, with CSP rolled out without breaking the site.
- [Harden sign-up, login and password reset](https://abacklaunch.com/prompts/auth-hardening) - Check how passwords, sessions and resets work, and fix the gaps attackers try first.
- [Scan for leaked secrets and lock them down](https://abacklaunch.com/prompts/secrets-scan) - Find API keys and passwords in the code, the history and the browser bundle, and stop new ones getting in.
- [Rate limits on public endpoints](https://abacklaunch.com/prompts/rate-limits) - Limit how often anyone can hit the endpoints that cost money or invite abuse, with clear 429 answers.
- [Error tracking, health checks and uptime alerts](https://abacklaunch.com/prompts/error-tracking-uptime) - Know about errors and outages before your users tell you: error tracking, a health endpoint and alerts.
- [Database backups you have actually restored](https://abacklaunch.com/prompts/database-backups) - Make sure your data is backed up on a schedule, kept long enough, and that a restore actually works.

## Related

- [All prompts](https://abacklaunch.com/prompts)