Security scanners

Scanners that look at a deployed app, a public repo, or both. Most of the newer ones are aimed at apps built with Lovable, Bolt, Cursor, and similar tools. A clean scan is not a certification.

9 tools

AmIHackable
Security scanners
Paste a public URL and get an outside-in report on exposed files, secrets in JavaScript, headers, TLS, and similar issues, plus a prompt for your AI tool.
Pricing as seen: Scan and full report listed as free while V2 is rebuilt. Future paid monitoring: See site.
CheckVibe
Security scanners
Scans a live app and, if you connect them, the repo and pull requests, then returns ranked findings with a suggested fix.
Pricing as seen: A free account can run scans. Paid plans add fixes, monitoring, and team features. Dollar amounts: See site.
LockedVibe
Security scanners
Security review for AI-built web apps covering secrets, Supabase or Firebase policies, auth, and dependencies, plus a free passive leak checker.
Pricing as seen: Quick Review is listed at $29 and only needs a live URL. Other audit prices: See site.
OWASP ZAP
Security scanners
Free, open-source web application security scanner and proxy for testing a running site, including scripted scans.
Pricing as seen: Free and open source.
Scanbee
Security scanners
Runs several scan types — live app, code, dependencies, and cloud checks — from one dashboard aimed at people building with Lovable, Bolt, and similar tools.
Pricing as seen: Free to start, no card listed. Paid tier prices: See site.
Vibe App Scanner
Security scanners
Scans a running AI-generated web app for leaked secrets, weak data access, auth gaps, and related issues, with a fix you can paste back into the builder.
Pricing as seen: First scan free. Go is listed at $19/month (20 scans, up to 3 projects). Pro is listed at $39/month (150 scans, weekly monitoring, up to 10 projects).
VibeCheck
Security scanners
Reads a public GitHub repo and returns a preliminary score for leaked keys, open database rules, and unprotected routes.
Pricing as seen: Preliminary score is free for public GitHub repos. A full report is listed at $19.
VibeEval
Security scanners
Black-box tests a deployed app from the outside, then has a person review findings before the report is delivered.
Pricing as seen: A 14-day Pro trial is listed with no card. Paid plan prices: See site.
VibeWrench
Security scanners
Runs free checks for security, speed, SEO, and accessibility against a URL, a public GitHub repo, or pasted code, and returns a fix prompt per finding.
Pricing as seen: Free tier lists 3 scans per month with no signup. Paid plan prices: See site.