VibeScan
Actively maintained
29 linking domains
Emerging
- For
- People building apps with Lovable, Bolt, Cursor or Claude who want a security check of their live URL
- Activity
- Actively maintainedsite updated 3 weeks ago
- Used for
- Scan a deployed app's live URL for exposed secrets
- Check Supabase row level security settings on a live app
- Review missing security headers and known dependency CVEs
- Publishes llms.txt, a file written for AI assistantsvibe-scan.app ↗
- Launched on Product Hunt on Apr 29, 2026Product Hunt ↗
Price not read
- OpenAPI spec1 pathsthe spec ↗
- API docsvibe-scan.app/developersthe vendor's page ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Snyk
Scans source code, open source dependencies, container images and infrastructure-as-code for vulnerabilities, and suggests fixes in the IDE, CLI and pull requests.
63.1kActiveFrom $25/mo2015 - #2
Sourcery
Reviews GitHub and GitLab pull requests for logic bugs and security issues, posting summaries and one-click suggested fixes.
1.4kActiveFrom $15/user/mo - #3
ReachUpMCP · sign-in
Deploys web applications directly from AI chat conversations to live URLs with managed hosting and infrastructure.
230ActiveFrom $20/mo2025 - #4
Navin
Terminal AI agent that writes code, reviews security, hunts leads, and manages marketing campaigns.
100ActiveFrom $20/mo2024 - #5
Agentic Control PlaneMCP · sign-in
Checks every tool call a coding agent makes against allow, ask, or never rules and records its cost.
56ActiveFrom $100/mo - #6
SimplyScanMCP · open
Checks deployed sites made with AI coding tools for leaked credentials, unprotected database tables, injection flaws and slow page loads.
44ActiveFrom $14.99 per use
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use VibeScan for?
Sign in to leave a noteWhat is VibeScan?
Scans the live URL of an app built with Lovable, Bolt, Cursor or Claude for exposed secrets, Supabase row-level security gaps and missing headers. It is listed in the Atlas under Developer tools.
Who is VibeScan for?
People building apps with Lovable, Bolt, Cursor or Claude who want a security check of their live URL
Do people use VibeScan?
Emerging.
Is VibeScan still maintained?
Actively maintained: site updated 3 weeks ago.
Does VibeScan give refunds?
In its own words (terms of service, 2026-10-22): “Paid scan credits are non-refundable once a scan has been run.”
What are alternatives to VibeScan?
In Developer tools, by use: Snyk, Sourcery, ReachUp, Navin, Agentic Control Plane, SimplyScan.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.