Security scanners
Scanbee
Runs several scan types — live app, code, dependencies, and cloud checks — from one dashboard aimed at people building with Lovable, Bolt, and similar tools.
Pricing as seen
Free to start, no card listed. Paid tier prices: See site.
Checked 16 Oct 2026. Prices change. Confirm on the vendor site before you buy.
Pricing sourceUpdated
16 Oct 2026
Added
16 Oct 2026
Supported builders
The homepage names Lovable, Bolt, Claude Code, Cursor, v0, and Replit. Windsurf was not in that list when we checked, though a deployed URL may still scan.
What it is
Scanbee describes itself as security testing for vibe coders. The homepage lists DAST, SAST, SCA, CSPM, and vulnerability scanning in one UI, with no CLI required, and names Lovable, Bolt, Claude Code, Base44, Cursor, v0, and Replit.
A distinctive claim is Supabase JWT injection so authenticated routes get tested, which means you hand it Supabase URL and key material. Read what that access includes before you connect production.
Best for: A Supabase app whose important bugs are behind authentication, and whose owner can grant scan credentials on purpose.
Watch-outs
- Authenticated scanning needs Supabase credentials. Treat those like production access.
- Paid prices were not confirmed on the homepage on 16 Oct 2026.
Our take
Opinion from ShipSafeStack. Not a score, not a certification, and not a sponsorship.
Attractive if your app is Supabase-backed and public-only scanners stop at the login page. Handing over a JWT is a real access decision, not a checkbox. Confirm what the free tier actually runs before you plan a process around it.