Practical learning · 7 project-based lessons

The GRC Vibe Coding Recipe Book

Start with the problem, not the stack.

You do not have to become a software engineer before you can build a useful tool. With AI as a coding partner, GRC practitioners can turn recurring problems into small applications, automate repetitive work, and learn how technology works along the way. The important part is understanding what you are building well enough to make informed decisions, test the result, and keep it safe.

This Recipe Book explains the technology ingredients behind seven GRC examples. Each lesson starts with a realistic problem, introduces a possible stack, and explains how its pieces work together. The goal is to help you make informed decisions, not to prescribe a build assignment or encourage unnecessary complexity.

What you will learn

• How a browser-only vendor review works using HTML, CSS, and JavaScript.
• How to turn a control spreadsheet into a React dashboard.
• How Laravel supports a controlled policy approval workflow.
• How Python automates evidence checks and when an API is needed.
• How a Cloudflare Worker supports hosted intake and how AI tools differ.
• When connecting technologies solves a real problem instead of adding overhead.
• How to explain and revisit your technology choices with confidence.

The seven short lessons work in order or as quick references. Want to explore specific tools instead? Compare the five core stacks, starting with HTML, CSS, and JavaScript. For the full approach to planning, prompting, reviewing, testing, and shipping a project, visit the GRC Vibe Coder's Playbook.

Explore the Seven Lessons

1. 01
   Foundations: From a GRC Problem to a Web Stack

   Understand browsers, servers, GitHub, and why a fictional vendor review fits HTML, CSS, and JavaScript.

2. 02
   Turn a Spreadsheet into a Dashboard

   Explore React, Next.js and TypeScript through a control-status dashboard.

3. 03
   Build a Policy Approval Workflow

   Use PHP, Laravel and Filament to move from a form to controlled reviews.

4. 04
   Automate an Evidence Check

   Start with Python and add FastAPI only when an API is necessary.

5. 05
   Create a Hosted Exception Intake

   Use Cloudflare Workers and TypeScript when a browser needs a trusted service.

6. 06
   Connect a Dashboard to an Evidence Service

   Combine React and Python through a small, testable API boundary.

7. 07
   Choose Your Stack and AI Workflow

   Compare the projects, test your AI tools, and write a practical build blueprint.