DIY AI Websites Look Done. Are They Safe?

You can sit down with an AI tool, or a do-it-yourself website builder, and have pages that look finished before dinner. For a shop, an office, or a clinic, that is a tempting way to get online. Looking done is not the same thing as being safe. A site can look complete and still leave private information where a stranger can open it.

AI is a real help. D3 uses it too. The point is that a person should still check the security. The tool does not know which pages should stay private, or whether anyone kept a backup.

What the news actually said

On October 20, 2026, ITWeb reported that the South African coffee chain Bootlegger had an internal dashboard expose data across 132 stores. The CEO had publicly championed building apps with AI. The dashboard's login screen did not actually protect the data behind it.

Bootlegger has not confirmed that AI built that dashboard. This article does not claim that it did. A login screen can look serious and still leave the information open.

A finished look is a different job from a safe site

An afternoon of work can get the words and the pictures in place. The same gaps show up whether a person typed the site or an AI tool did:

• A login page that only hides things on the screen. The buttons go away, but the information is still at the address behind them.
• Data left open behind the page. Someone who never signs in can still open a list, a file, or a dashboard by going straight to the link.
• Secret keys sitting in the code. A password, or a private code the site uses to connect to another service, is written where a visitor or the next helper can find it.
• No backups and no updates. The first version goes live, and nobody keeps a copy or installs later fixes.

Checks you can do, or ask about

You do not need special software for a first look. Try these, or ask the person who built the site.

• Sign out and open the private page. If the customer list, the staff notes, or the dashboard still show up, the login is only hiding the menu.
• Try the address, not just the button. Paste the link of a private page into a fresh window. If it opens without a sign-in, the data is left open behind the page.
• Ask where the passwords and private codes live. They should not be pasted into the page or into a file anyone can download. They belong out of sight, not in the text of the site.
• Ask who has a backup, and how old it is. You want a real copy and a date, so someone can put the site back if it breaks.
• Ask who installs updates after launch day. A builder who finished on Tuesday may not be watching in November. A person still has to apply the updates.
• Count the logins. Who can sign in today? Remove anyone who no longer works with you, including a helper who only set the site up.

If an answer is "I am not sure," settle that before you put more of the business on the site. Offices and clinics should be especially careful. Do not type patient or client details into a page or a form until you know who can see them.

What a simple D3 site includes

D3 IT Solutions Inc is veteran-owned and based in Texas, serving businesses nationwide. A starter website is a 1 to 3 page site. It does not include a contact form, and it does not include customer logins. A public page with your services, hours, and phone number does not need a private dashboard.

Typical time from the day JD has what he needs to a live starter site: as quick as a day, and up to 1 week.

Keeping the site online, including the certificate, backups, and software updates, is a separate conversation. So is a later change. JD confirms the scope and sends a written quote before any work starts. He does not publish those amounts on this site.

If you already have a site from an AI tool or a do-it-yourself builder, you do not have to throw it away. Ask for a look on the contact page. JD can look at what is public and tell you what is worth a second pass.

More on certificates, passwords, and backups is in Website security basics for small businesses and clinics. What the starter site includes is in What a starter website includes.