Anyone can now take your app apart with AI. Here's how to protect it

You connect REA to an AI coding assistant such as Claude Code, Codex or Cursor, point it at an app and ask in plain words: how does the login work, where does this price come from? The AI opens the app and answers. It reads phone apps, desktop programs and websites.

REA is free and open source, made by a developer who goes by morluto.

Sources: REA on GitHub, GitHub trending (checked 13 and 26 October 2026).

Anything inside the files your users download can now be read in minutes:

• Hidden passwords and keys stop being hidden.
• Prices and discounts that the app checks by itself can be bypassed.
• A feature you paid to build can be copied much faster, as the AI-built Adobe clones show.
• A whole website can be cloned and put online at another address under your name.

And AI that finds security holes keeps getting better (Gemini 4 Argon).

1. Keep secrets on your server, never inside the app.
2. Let the server check prices, discounts and limits, so changing the app changes nothing.
3. Scramble the code so it’s much harder to read and copy.
4. Keep the app and its plugins updated, and have someone check them regularly.

For the day someone clones your website or reverse engineers your product anyway, we built Superior Security, for our own site and the products we make.

• The clone gives itself away. Put online at another address, it stops showing your site. Visitors see that it’s a clone and get one button back to the original.
• You find out. An alert tells you where the clone is, when it was opened, which pages, and from which device and IP address.
• Cloning tools leave empty-handed. Many of the tools made to copy websites are turned away before they get anything.
• Only your code runs. Your pages refuse code slipped in from outside.
• Private stays private. Drafts and private files stay locked.

Then there are the layers we don’t write about.

Superior Security is included with the apps and websites we build, and available on request: email contact@pc113studio.no. Someone already tried it on our own site. Here is what happened.