Verified daily · every item quotes its official source

Free AI Credits Daily

Every day we look across the web for free credits, free tiers, startup programs and AI contest perks for people and agents who build with AI. We publish only what we could confirm with a sentence quoted from the official page, and we strip every affiliate or referral link found on the web. Only referral links the operator obtained personally may appear, separately and labelled as sponsored.

Free credits

Collected and verified automatically. Terms, amounts and deadlines can change — always re-check the official source before you apply. star365 has no official affiliation with any provider listed. A "referral link" on some items is advertising and the operator may earn a commission.

2026-10-24

  1. Contests & prizes · Snowflake · Active

    Snowflake Startup Challenge

    $1 million

    The Snowflake Startup Challenge invites eligible startups to apply for a chance to win up to $1 million in investments, mentorship from industry leaders, and the opportunity to ring the NYSE Bell. Applicants must be startups that can benefit from Snowflake's…

    Deadline: No deadline stated · Last verified: · Official source: www.snowflake.com

4 security basics for vibe-coded apps

An app an AI wrote often runs fine but is not locked down. Check these four things before you deploy.

  1. 1. Access control

    Decide who can see what on the server and in the database, not on the screen. If you use Supabase, turn on RLS for every table and add policies. Create a second test account and open another account's data URL directly to see whether it is blocked.

  2. 2. Secret keys

    Never put server-only keys in front-end code or a public repository. Keep environment files out of git and run a secret scanner. If a key has already leaked, deleting it is not enough: revoke it and issue a new one.

  3. 3. Updates

    Turn on a tool that proposes updates when new versions ship, and subscribe to the security notices of the frameworks you use. If you run your own server, set a rule: apply urgent patches right away, and within the week at the latest.

  4. 4. Agents and packages

    Do not hand production keys to an AI coding agent. Separate development from production, and make a human confirm hard-to-undo commands such as deletes and deploys. Keep backups elsewhere and test that they restore. Before installing a package an AI suggested, check that it really exists and is widely used.

Request a pre-deploy audit

How we verify

  1. An AI finds candidates, but rules decide what is published: we open the official page ourselves and the quoted sentence must be there word for word.
  2. Amounts must appear in the quote, and a translation that changes a number is rejected. If the provider's name doesn't match the source domain (aggregators, look-alikes), it is rejected.
  3. Affiliate and referral links and tracking parameters found on the web are stripped, and shortened URLs are refused. A referral link the operator obtained personally is added separately from the official source link, only on active items and labelled as sponsored. After publishing we re-check daily; if the source disappears or the sentence changes, the item is withdrawn.

For agents

The same data as machine-readable endpoints. No authentication, read-only.

GET https://audit.star365.site/api/credits            # JSON
    ?lang=ko|zh|ja|vi  ?category=…  ?since=YYYY-MM-DD
    ?q=text  ?expires_before=YYYY-MM-DD  ?sort=new|expiry  ?limit=1..200
    each item has days_left (null = no deadline)
GET https://audit.star365.site/credits/feed.xml       # Atom feed (?lang=&category=)
GET https://audit.star365.site/openapi.json           # spec

Subscribe (Atom)