Skip to content
SSShipSafeStack

Security scanners

Vibe App Scanner

Scans a running AI-generated web app for leaked secrets, weak data access, auth gaps, and related issues, with a fix you can paste back into the builder.

Official site

Pricing as seen

First scan free. Go is listed at $19/month (20 scans, up to 3 projects). Pro is listed at $39/month (150 scans, weekly monitoring, up to 10 projects).

Checked 16 Oct 2026. Prices change. Confirm on the vendor site before you buy.

Pricing source

Updated

16 Oct 2026

Added

16 Oct 2026

Supported builders

LovableBoltv0ReplitCursorClaude CodeWindsurf

The vendor calls out Bolt, Lovable, Replit, and v0 for specialized checks, and says it can scan web apps built with other tools too. Cursor, Claude Code, and Windsurf fit as soon as the app has a URL.

What it is

Vibe App Scanner (VAS), operated by Silex Dev, is built for web apps from tools such as Bolt, Lovable, Replit, and v0. It tests the running app: database exposure, authentication, APIs, and secrets in JavaScript.

Standard scans are on every plan. Deeper crawls and extra access-control tests are described as a Pro feature. A remote MCP server is documented for starting scans and reading reports on eligible plans.

Best for: A founder with one to a few deployed web apps who wants a scheduled re-scan and a fix written for an AI coding tool.

Watch-outs

  • Repository scanning was still marked coming soon on the pricing page we checked.
  • Individual checks depend on what the scanner can see. A login wall hides part of the app.

Our take

Opinion from ShipSafeStack. Not a score, not a certification, and not a sponsorship.

One of the clearer priced options if you want a recurring scan of a small number of projects. The first scan being free is the right way to see whether the findings are specific. Weekly monitoring on Pro is the feature that matters after launch, not the first demo.

Keep reading

Others in Security scanners

  • Security scanners
    Paste a public URL and get an outside-in report on exposed files, secrets in JavaScript, headers, TLS, and similar issues, plus a prompt for your AI tool.

    Pricing as seen: Scan and full report listed as free while V2 is rebuilt. Future paid monitoring: See site.

  • Security scanners
    Scans a live app and, if you connect them, the repo and pull requests, then returns ranked findings with a suggested fix.

    Pricing as seen: A free account can run scans. Paid plans add fixes, monitoring, and team features. Dollar amounts: See site.

  • Security scanners
    Security review for AI-built web apps covering secrets, Supabase or Firebase policies, auth, and dependencies, plus a free passive leak checker.

    Pricing as seen: Quick Review is listed at $29 and only needs a live URL. Other audit prices: See site.