It is inspiring to see more and more content being published about low-code no-code (LCNC) security.
It is a sign that LCNC apps are finally leaving the labs and hitting the markets to be used in production.
When a product launches into production, there are a handful of assumptions users make about it, such as:
- It is reliable
- It is secure. My data, in it, is secured.
- It operates within the boundaries of law
- It is transparent
The No-Code Founders (NCF) group came up with a good compilation of security and data privacy topics any project manager with an app running at Bubble.io should have as a checklist for production.
https://blog.nocodefounders.com/bubble-io-security-ultimate-guide/
An interesting complementary content is OWASP’s LCNC security risks list.
https://owasp.org/www-project-top-10-low-code-no-code-security-risks/