Security scanners
VibeCheck
Reads a public GitHub repo and returns a preliminary score for leaked keys, open database rules, and unprotected routes.
Pricing as seen
Preliminary score is free for public GitHub repos. A full report is listed at $19.
Checked 16 Oct 2026. Prices change. Confirm on the vendor site before you buy.
Pricing sourceUpdated
16 Oct 2026
Added
16 Oct 2026
Supported builders
The free scan needs a public GitHub repo, so the builder only matters if the code is pushed there. The homepage names Cursor, Lovable, Bolt, v0, and Claude. Private repos were described as not supported for the paid report yet.
What it is
The VibeCheck at getvibecheck.dev asks for a public GitHub URL, reads the code without installing it, and shows a preliminary score. The homepage says that score skips the dependency check, so treat a high free score as a ceiling, not a launch decision.
A paid full report is listed as including every finding, a dependency audit, and a copy-paste prompt. Several other products use similar names. This entry is only the site at getvibecheck.dev.
Best for: A public repository you are willing to let a third party read, when you want a cheap second pass on secrets and missing auth.
Watch-outs
- Public repos only for the flow described on the homepage. Do not buy a report for a private repo if the site still says that will fail.
- Other companies use the name VibeCheck. Match the domain.
Our take
Opinion from ShipSafeStack. Not a score, not a certification, and not a sponsorship.
Fast and specific about its own limits, which is rare. Confirm the domain before you pay — vibecheck.day and other “vibe check” sites are different products. A free score that skips dependencies can look calmer than the repo is.