Vibe App Scanner

About Vibe App Scanner

Vibe App Scanner, or vas, is a security scanner aimed at applications built with AI coding tools — Lovable, Replit, Base44 and similar — where the shipping speed routinely outruns the security review. Its stated difference from a generic scanner is that it tests the live application rather than reading response headers: it probes the database, the auth flow and the APIs the way an attacker would, running more than a hundred and fifty checks that span security, SEO, AI search readiness (AEO and GEO), performance, accessibility, compliance and email configuration. The findings it advertises are the specific ones AI-generated apps produce: Supabase row-level security missing so a profiles table is readable without auth, an exposed .js.map leaking source, an OpenAI key left in a bundled asset, no rate limiting on an auth endpoint. Every finding ships with a fix written for a coding agent to apply, delivered over MCP to Cursor, Claude Code or Windsurf, or as SARIF and copy-paste text, after which you re-scan to confirm the fix landed. Pro adds a weekly automated deep scan that logs in and attempts to reach other users' data across up to a hundred and fifty pages, weekly monitoring with alerts, breach monitoring and email security checks. The first scan is free and returns a score and issue counts without a card; payment unlocks the findings themselves and their fixes.

Key Features

Tags