Posts


# From Cutline to VibeKiln: Building the Right Thing the Right Way

*The product we first built was a product manager. The company we ended up building is a recursive foundry for sound vibecoding tools.*

---

Today, we're announcing that **Cutline is now VibeKiln**.

We can call it a pivot but in this era of startup software it is a reality that from conception to PMF, good startups are undergoing constant evolution. We'd like to count ourselves as a good startup. Also, apologies for what follows as my native writing dialect is littered with em-dashes, before ChatGPT ruined them.

Cutline was concieved in a hypothesis for what we call the Vibecoding Cliff -- there has been an apparent explosion in developer velocity and prototypes and yet no concomittant Renaissance of new production applications. Our hypothesis was (and to an extent, remains) that this was a validation gap--with vibecoding increasing both the velocity and the number of developers, product management practices had not caught up to the new way of working. What we came to realize is that the problem is wider than that; the vibecoding revolution has effectively "shifted right" two sets of constraints: constraints from customer validation/the market, and constraints from productionalization. And these are so often entertwined--the developer who cranks out an MVP over a weekend looks up and realizes not only that maybe nobody wants the ideal version of what they are selling, but their new bundle of tech debt is a ticking time bomb that might vibedelete the database when Claude gets in the quantiized mood.      

Cutline now embodies a theory that what LLMs need is a harness to help them manage constraints, so we can 'shift back left' these requirements and support the software engineering development cycle at vibecoding speed, but past the MVP sticking point. LLMs thrive in the unconstrained space, one-shotting prototypes like there was no tomorrow, but as one tries to address bugs (adding more constraints), you often enter into vibecoding whackamole -- honing in on the new constraint loosens previously fit ones. At the heart of Cutline is a product constraint graph that maps dependencies and risks within your product definitition, so that it can provide dynamic context to your coding agent on what's most urgent in the immediate context. Think of it as a coach that helps its star player in the most stressful situations to focus on the main elements before it. (Or, think of it as the buffer that saves your coding agent context from getting overrun by globs of PRD and code, and saves you token cost in the process.) 

So, in sum, an evolution more than a pivot. The product you know — the technical PM platform that helps developers build secure, scalable, and reliable software with AI coding agents — is still called Cutline. But the company behind it, the research driving it, and the mission unifying it needed a name that reflected what we've become.

## Why VibeKiln?

When we started on Cutline in late 2025, we built it to solve a specific problem: give builders feedback on their startup ideas.

Cursor, Claude Code, Windsurf — these tools let developers ship features in hours. But for the new inductees into the vibecoding army, they do not advise on whether the blockchain-based todo app is wise to build. What is worse, and what we discovered along the way, is that they often do not constrain users from firing every toegun they can find.

Vibecoding, it turns out, is a massive violation of the functional programming maxim: "make illegal states irrepresentible". In fact, all plausible states are representable, including the illegal ones. Cutline is an endeavor to (apologies) make illegal states irrepresentible again. 

So, Cutline was our answer: a technical product manager that guides your coding agent with production-ready constraints. Extract requirements, validate through pre-mortem analysis, inject security and compliance rules directly into your agentic IDE or terminal via Model Context Protocol.

**It worked. But we realized the problem was bigger than tooling.**

## The Vibecoding Problem

As we worked with more teams, we saw the same patterns:

- **Security vulnerabilities** that followed predictable patterns (missing input validation, hardcoded secrets, SQL injection)
- **Scalability bottlenecks** discovered only after launch (no rate limiting, inefficient queries, missing caching)
- **Compliance gaps** that delayed enterprise sales (missing SOC 2 controls, HIPAA violations, PCI-DSS failures)

These weren't random bugs. They were *structural issues* inherent to how LLMs generate code.

AI coding agents are pretrained on some swaths of internet code and reinforcement learning trained on code that compiles and completes unit tests. There are no points for elegeance in SEBench, and, it turns out, not enough special minding on coding antipatterns to perservere against generating them in the midst of a hard problem. The fact that coding agnets tend toward verbosity exascerbates the issue.  At the end of the day, the model's statistical default is "plausible compilable code" not "secure, scalable code."

The question became: **what is going to drive software quality in code in a world where coding agents are automated?**

## Enter VibeKiln

I was thinking about how the process of annealing in metal and glassworking makes fragile materials stronger (more ductile). In annealing, the material is heated so that atoms can diffuse more readily, and as they cool, recrystalize in a more homogenous, resilient state.

I'm arguing from metaphor, but this is why I think neither PRDs nor security checks per se are going to be the solution alone--I think what is needed is a process that actively reworks the code at a fine grained until it can be safely crystalized. In Cutline, that takes the form of the dynamic constraint graph guiding the coding agent through a modified Red-Green refactoring cycle--a new feature is first commited as LLM plausible code and then successively reworked by security, stability, and other constraints until it is well honed.

This new set of capabilities, of which Cutline's RGR cycle is the first, starts to outstrip the original Cutline metaphor of strict priority filtering of requirements and features, and more evokes a process of continual reworking. Like metalworking. 

So, **VibeKiln** is the foundry where vibe-coded prototypes undergo the annealing necessary to become production-grade software.

It provides the heat that allows fragile ideas to be reworked into sturdy systems:
- **Security vibe checks** that catch vulnerabilities before exploits
- **Scalability testing** that prevents bottlenecks at scale
- **Reliability constraints** that ensure uptime from day one
- **Compliance validation** that opens enterprise doors

We're no longer just building a product. We're researching, teaching, and tooling the **discipline of safe and sound vibecoding**.

## What This Means for You

### **1. Cutline Remains Our Flagship Product**

Cutline is still the technical product management platform for AI-assisted development. It still:
- Extracts security, scalability, and reliability constraints from your product ideas
- Runs pre-mortem analysis to identify risks before you build
- Injects production-ready guidance into Cursor, Claude Code, and Windsurf via MCP
- Validates compliance against SOC 2, HIPAA, PCI-DSS, GDPR, and OWASP LLM

**Nothing changes.**.

### **2. VibeKiln Is Our Foundational Tool Layer**

[VibeKiln.ai](https://vibekiln.ai) is where we develop tools that accelerate development for Cutline and other products. It includes:
- **Security vulnerability classifiers** for AI-generated code
- **Graph tools** for product and risk surface modeling
- **Constraint extraction and extrapolation** tools

Cutline is the product. VibeKiln is the foundation and foundary.

### **3. Free Security Vibe Check for Your Codebase**

To celebrate the rebrand, we're offering a **free security vibe check** for your vibecoded codebase.

Our AI-powered scanner analyzes your code for:
- ✅ **Security vulnerabilities** (missing input validation, hardcoded secrets, SQL injection)
- ✅ **Scalability issues** (missing rate limiting, inefficient queries, lack of caching)
- ✅ **Reliability gaps** (poor error handling, missing retries, weak monitoring)
- ✅ **Compliance violations** (SOC 2, HIPAA, PCI-DSS, GDPR, OWASP LLM)

**Get your free scan:** [thecutline.ai/scan](https://thecutline.ai/scan)

No credit card. No signup required. Just point it at your repo and get a detailed security report in minutes.

## Our Mission: Build the Right Thing the Right Way

VibeKiln's mission is simple:

> **Enable developers to build the right thing the right way — with security, scalability, and reliability from the first line of code.**

Vibecoding unlocked speed. VibeKiln ensures that speed doesn't come at the cost of quality.

### **Build the Right Thing**
- Pre-mortem analysis to validate ideas before building
- AI personas to test assumptions without recruiting users
- Constraint extraction from natural language descriptions

### **Build It the Right Way**
- Security constraints from SOC 2, HIPAA, PCI-DSS, OWASP LLM
- Scalability requirements based on your architecture
- Reliability patterns enforced through constraint graphs

We're not anti-AI. We're not anti-speed. We're **pro-production-ready**.

## What's Next

Over the coming months, you'll see VibeKiln expand in three directions:

**1. More Research**
- Deep dives on vibecoding security patterns
- Guides for SOC 2, HIPAA, and PCI-DSS compliance with AI-generated code
- Case studies from teams shipping production systems with Cursor and Claude

**2. Enhanced Tooling**
- Deeper IDE integration with Cursor, Claude Code, and Windsurf
- Expanded compliance framework support (FedRAMP, GLBA, FERPA/COPPA)
- Automated security testing for vibecoded features

**3. Community Building**
- Open-source vibecoding security checklists
- Templates for Cursor rules and Claude Code configs
- Workshops on safe vibecoding practices

## Try It Today

**Free Product Validation:** [thecutline.ai/validate](https://thecutline.ai/validate)
Run a pre-mortem on your product idea. Identify risks before you build.

**Free Security Vibe Check:** [thecutline.ai/scan](https://thecutline.ai/scan)
Scan your codebase for security, scalability, and compliance issues.

**Read Our Research:** [vibekiln.ai/blog](https://vibekiln.ai/blog)
Deep dives on vibecoding, product validation, and AI development best practices.

---

## Why This Matters

AI coding agents are the most significant productivity unlock in software development since Stack Overflow. They let solo founders build in weeks what used to take teams months.

But speed without structure creates technical debt that compounds exponentially.

**VibeKiln is the structure.**

We're building the research, frameworks, and tools that let developers move fast *and* build right. Security from day one. Scalability from the first feature. Reliability baked into the architecture.

The future of software development is vibecoding. The future of vibecoding is production-ready.

Welcome to VibeKiln.

---

## FAQ

**Q: Why did Cutline become VibeKiln?**

As we deepened our research into AI-assisted development, we realized the problem isn't just tooling — it's the entire paradigm of vibecoding. We needed a brand that reflected our expanded mission: not just guiding your coding agent, but researching, publishing, and teaching the principles of safe vibecoding.

**Q: What happens to Cutline?**

Cutline remains our flagship product. Everything you knew about Cutline still works; you'll just find it at [thecutline.ai](https://thecutline.ai) instead.

**Q: What is VibeKiln's mission?**

Enable developers to build the right thing the right way — with security, scalability, and reliability from the first line of code. We research how AI coding agents introduce technical debt, publish frameworks for safe vibecoding, and build tools that enforce production readiness.

**Q: What does VibeKiln mean?**

A kiln is a furnace that hardens clay into ceramics through controlled heat — structural annealing. VibeKiln is the foundry where vibe-coded prototypes undergo the annealing necessary to become production-grade software.

---

*Ready to vibecode safely? [Get your free security vibe check →](https://thecutline.ai/scan)*


product announcement

From Cutline to VibeKiln: Building the Right Thing the Right Way