Vibe App Scanner
A scan of a deployed app for secrets in JavaScript, missing Supabase RLS, weak auth, and missing headers.
Last updated
- Price
- Pages disagree
- Free tier
- Yes
- Checks
- Live URL, Supabase RLS, Secrets
- Last verified
- Oct 14, 2026
What the public pages say
The scanner's own description says it looks at a public URL for exposed API keys in JavaScript, missing Supabase row level security, missing Firebase rules, weak password policies, missing HTTP security headers, authentication problems, and source maps. Deep scans that log in are described as a Pro feature. Repository scanning is listed as not included yet.
Read /pricing and the site root before you pay. Quote the page you actually checked out on, not a blend of the two.
Free tier
Two of the site's own pages publish different paid prices. The page at the site root lists Go at $29/month (20 scans, up to 3 projects) and Pro at $49/month (150 scans, a weekly deep scan, up to 10 projects). The page at /pricing, checked the same day, lists Go at $19/month (20 scans, up to 3 projects) and Pro at $39/month (150 scans, weekly deep scans, up to 10 projects). Both pages say the first scan is free and that the free result reveals one finding in detail. Code repository scanning is marked coming soon on /pricing.
Left off the vendor's site
- Which paid price is the one checkout uses. The two pages were not reconciled on 2026-10-14.
Sources
Listed on ShipSecurely
Put this on Vibe App Scanner's site. The image links back to this page.
<a href="https://shipsecurely.dev/tools/vibe-app-scanner"><img src="https://shipsecurely.dev/badge.svg" width="196" height="32" alt="Listed on ShipSecurely"></a>
Markdown version · Canonical page: https://shipsecurely.dev/tools/vibe-app-scanner