All tools

The full list, grouped by category. Listings are editorial. A sponsored slot on the homepage is labeled, and it is not a place in this list. Pricing is as seen on the date each page was checked.

43 tools

Security scanners

Point something at the live URL or the repo before you invite users.

AmIHackable
Security scanners
Paste a public URL and get an outside-in report on exposed files, secrets in JavaScript, headers, TLS, and similar issues, plus a prompt for your AI tool.
Pricing as seen: Scan and full report listed as free while V2 is rebuilt. Future paid monitoring: See site.
CheckVibe
Security scanners
Scans a live app and, if you connect them, the repo and pull requests, then returns ranked findings with a suggested fix.
Pricing as seen: A free account can run scans. Paid plans add fixes, monitoring, and team features. Dollar amounts: See site.
LockedVibe
Security scanners
Security review for AI-built web apps covering secrets, Supabase or Firebase policies, auth, and dependencies, plus a free passive leak checker.
Pricing as seen: Quick Review is listed at $29 and only needs a live URL. Other audit prices: See site.
OWASP ZAP
Security scanners
Free, open-source web application security scanner and proxy for testing a running site, including scripted scans.
Pricing as seen: Free and open source.
Scanbee
Security scanners
Runs several scan types — live app, code, dependencies, and cloud checks — from one dashboard aimed at people building with Lovable, Bolt, and similar tools.
Pricing as seen: Free to start, no card listed. Paid tier prices: See site.
ShipWatch
Security scanners
Reads a live public app for leaked API keys, a downloadable .env or .git path, and missing security headers, and writes a fix prompt for an AI builder.
Pricing as seen: Free scan listed at $0, one-off, no sign-up. A plan unlocks every fix prompt and weekly monitoring. Paid price: See site.
Vibe App Scanner
Security scanners
Scans a running AI-generated web app for leaked secrets, weak data access, auth gaps, and related issues, with a fix you can paste back into the builder.
Pricing as seen: First scan free. Go is listed at $19/month (20 scans, up to 3 projects). Pro is listed at $39/month (150 scans, weekly monitoring, up to 10 projects).
VibeCheck
Security scanners
Reads a public GitHub repo and returns a preliminary score for leaked keys, open database rules, and unprotected routes.
Pricing as seen: Preliminary score is free for public GitHub repos. A full report is listed at $19.
VibeEval
Security scanners
Black-box tests a deployed app from the outside, then has a person review findings before the report is delivered.
Pricing as seen: A 14-day Pro trial is listed with no card. Paid plan prices: See site.
VibeWrench
Security scanners
Runs free checks for security, speed, SEO, and accessibility against a URL, a public GitHub repo, or pasted code, and returns a fix prompt per finding.
Pricing as seen: Free tier lists 3 scans per month with no signup. Paid plan prices: See site.

Code & dependency security

Static analysis, dependency risk, and secrets in the repository.

Aikido
Code & dependency security
Security platform that looks across code, cloud, and runtime and tries to open fixes, aimed at teams that do not want five separate scanners.
Pricing as seen: See site.
CodeSonar
Code & dependency security
Deep static analysis for C, C++, and other languages, sold for enterprise and safety-critical software. Now offered by AdaCore.
Pricing as seen: Enterprise licensing. See site.
GitHub Advanced Security
Code & dependency security
GitHub’s own code scanning, secret scanning, and dependency features for repositories hosted on GitHub.
Pricing as seen: See site. Availability depends on your GitHub plan and whether the repository is public.
Semgrep
Code & dependency security
App security platform that combines custom and built-in rules for SAST, dependencies, secrets, and supply-chain checks in CI and the editor.
Pricing as seen: See site.
Snyk
Code & dependency security
Security platform for the code AI writes, open-source dependencies, containers, and cloud configuration, with hooks into coding agents.
Pricing as seen: See site.
Socket
Code & dependency security
Scans open-source packages for malicious behavior and blocks risky dependencies before they are installed or merged.
Pricing as seen: See site.

Database & auth

Where the data lives, and who is allowed to read it.

Better Auth
Database & auth
Open-source TypeScript authentication library that lives in your app, with plugins for sessions, social login, and organizations.
Pricing as seen: The framework is open source. Hosted dashboard and enterprise plans: See site.
Clerk
Database & auth
Hosted authentication and user management with prebuilt sign-in UI, billed on monthly retained users rather than raw signups.
Pricing as seen: Hobby is free. Pro is $25/month, or $20/month billed annually. Business is $300/month, or $250/month annually. Enterprise is custom. Billing is on monthly retained users.
Convex
Database & auth
Backend building blocks in TypeScript — queries, mutations, and a reactive database — aimed at apps and agents that should stay in sync.
Pricing as seen: See site.
Firebase
Database & auth
Google's app platform for auth, databases, storage, hosting, and related services used to build and run web and mobile apps.
Pricing as seen: See site. Usage-based Google Cloud billing, with credits sometimes offered for new billing accounts.
Neon
Database & auth
Serverless Postgres with branching, plus auth, object storage, and functions. Neon is part of Databricks.
Pricing as seen: See site.
Supabase
Database & auth
Postgres database with authentication, file storage, realtime, and edge functions, often the default backend under an AI-built app.
Pricing as seen: Free, then Pro from $25/month and Team from $599/month. Compute is billed per project. Pro includes $10/month in compute credits that cover one Micro instance. Enterprise is custom.
Xano
Database & auth
Backend platform for building and running APIs, data, and business logic, including with coding agents, on a stack you can govern.
Pricing as seen: See site.

Payments

Checkout, subscriptions, and who is the merchant of record.

Paddle
Payments
Merchant of record for software and digital products. Paddle handles payments, sales tax, and compliance across markets.
Pricing as seen: See site. Paddle publishes all-inclusive or custom pricing rather than a simple per-card rate.
Polar
Payments
Merchant of record and usage billing for software, with subscriptions, credits, and metered events.
Pricing as seen: Free plan listed at 5% + 50¢ per transaction. Paid plans listed at $20, $100, and $400 per month with lower transaction fees (3.80% + 40¢ down to 3.40% + 30¢). A startup program was also listed.
Stripe
Payments
Payments and billing infrastructure for cards, checkout, and subscriptions. You are typically the merchant.
Pricing as seen: See site. Card fees vary by country and product, so this entry does not quote a rate.

Email

Transactional mail and product email that does not live in the browser.

Loops
Email
Email platform for SaaS teams that sends marketing, product, and transactional lifecycle mail from one place.
Pricing as seen: Free to start, no card required. Paid plan prices: See site.
Resend
Email
API for transactional and marketing email, with official SDKs and React Email templates.
Pricing as seen: Transactional Free is $0 for 3,000 emails/month, capped at 100/day. Pro starts at $20/month for 50,000 emails. Marketing Free covers 1,000 contacts.

Hosting & deploy

Where the preview becomes a URL with HTTPS.

Cloudflare
Hosting & deploy
Global network for DNS, CDN, and application hosting, including Workers and Pages, with a free tier for hobby projects.
Pricing as seen: A free tier is listed for hobby projects (DDoS mitigation, universal SSL, global CDN). Paid plan numbers: See site.
Netlify
Hosting & deploy
Platform to build and deploy web apps from git, a CLI, or a prompt, with preview URLs, functions, and edge hosting.
Pricing as seen: See site.
Vercel
Hosting & deploy
Hosting platform for web apps and agents, with preview URLs, serverless functions, and a tight path from v0 and Next.js.
Pricing as seen: See site.

Monitoring & analytics

Know when production breaks, and what people actually do.

Plausible
Monitoring & analytics
Lightweight, cookie-free web analytics hosted in the EU, positioned as a simpler alternative to Google Analytics.
Pricing as seen: Starter shown at $9/month, Growth at $14/month, and Business at $19/month beside a 10k pageview tier on 16 Oct 2026. Confirm the tier on the site.
PostHog
Monitoring & analytics
Product analytics, session replay, feature flags, and error tracking, with usage-based pricing and a large free tier.
Pricing as seen: Usage-based, with free tiers shown at 1 million analytics events/month, 5,000 session recordings/month, and 1 million feature-flag requests/month. Paid rates were listed per unit and fall with volume.
Sentry
Monitoring & analytics
Error and performance monitoring for applications, with SDKs that report exceptions and traces from production.
Pricing as seen: See site.

Automation

Background work that should not run inside a button click.

Inngest
Automation
Durable functions for background jobs and workflows: steps, retries, and events without operating your own queue.
Pricing as seen: See site.
n8n
Automation
Workflow automation you can self-host or run in their cloud, combining a visual canvas with code steps and hundreds of integrations.
Pricing as seen: See site. A self-hosted edition exists, and a hosted cloud is offered.

AI app builders

The tools that generated the first version.

Bolt.new
AI app builders
Browser-based AI builder for websites and apps, with Bolt Cloud for hosting, databases, authentication, and integrations.
Pricing as seen: See site. The homepage says you can start building for free.
Claude Code
AI app builders
Anthropic’s coding agent for the terminal, IDE, and web, which reads and changes a repository and can open pull requests.
Pricing as seen: See site. Access depends on your Claude plan.
Cursor
AI app builders
AI coding agent in a desktop editor, the terminal, and other surfaces, for working inside a real codebase.
Pricing as seen: See site.
Lovable
AI app builders
AI app builder that turns a description into a working product, and says it can host, authenticate, and take payments for what it creates.
Pricing as seen: See site.
Replit
AI app builders
Online environment where an AI agent builds and publishes apps, with built-in auth, database, hosting, and monitoring.
Pricing as seen: See site. The homepage says you can start for free with no card.
v0
AI app builders
Vercel’s AI builder for UI and full-stack features, with one-click deploy onto Vercel infrastructure.
Pricing as seen: See site.
Windsurf
AI app builders
Windsurf MCP servers connect from settings. Cascade is the in-editor agent. Cloud agents take longer tasks. It is an editor, not a host.
Pricing as seen: See site.