Security scanners
CheckVibe
Scans a live app and, if you connect them, the repo and pull requests, then returns ranked findings with a suggested fix.
Pricing as seen
A free account can run scans. Paid plans add fixes, monitoring, and team features. Dollar amounts: See site.
Checked 16 Oct 2026. Prices change. Confirm on the vendor site before you buy.
Pricing sourceUpdated
16 Oct 2026
Added
16 Oct 2026
Supported builders
The vendor names Lovable, Cursor, Bolt, v0, Replit, and Windsurf, and describes MCP access from Claude and Cursor. Windsurf is named on their vibe-coding scanner page.
What it is
CheckVibe is a security product for teams shipping with AI coding tools. You give it a live URL — production, staging, or a prototype — and it runs a large set of checks against the running app, including exposed secrets in JavaScript, injection issues, headers, and TLS.
Connecting GitHub and a Supabase project extends the same account to code, dependencies, and backend configuration. The site also describes an MCP server and a REST API so an agent such as Claude or Cursor can pull findings. A free account is part of seeing the report.
Best for: A team that wants a live-URL scan plus optional repo and pull-request checks without standing up a security program.
Watch-outs
- A free account is required for the findings to land somewhere private. Do not expect a fully public report.
- Paid plan prices were not confirmed as stable public numbers on 16 Oct 2026.
Our take
Opinion from ShipSafeStack. Not a score, not a certification, and not a sponsorship.
Useful when you already have a URL and want one queue instead of a raw scanner dump. The full findings sit behind an account, so budget a few minutes to sign up before you judge the report. It does not replace reading your own database policies.