---
name: Vibe App Scanner
slug: vibe-app-scanner
url: https://vibeappscanner.com
category: URL scanning
bestFor: "A scan of a deployed app for secrets in JavaScript, missing Supabase RLS, weak auth, and missing headers."
freeTier: yes
price: "Pages disagree"
checks:
  - live-url
  - supabase-rls
  - secrets
freeTierNote: "Two of the site's own pages publish different paid prices. The page at the site root lists Go at $29/month (20 scans, up to 3 projects) and Pro at $49/month (150 scans, a weekly deep scan, up to 10 projects). The page at /pricing, checked the same day, lists Go at $19/month (20 scans, up to 3 projects) and Pro at $39/month (150 scans, weekly deep scans, up to 10 projects). Both pages say the first scan is free and that the free result reveals one finding in detail. Code repository scanning is marked coming soon on /pricing."
verifiedOn: "2026-10-14"
sources:
  - https://vibeappscanner.com
  - https://vibeappscanner.com/pricing
unknowns:
  - "Which paid price is the one checkout uses. The two pages were not reconciled on 2026-10-14."
---

The scanner's own description says it looks at a public URL for exposed API keys in JavaScript, missing Supabase row level security, missing Firebase rules, weak password policies, missing HTTP security headers, authentication problems, and source maps. Deep scans that log in are described as a Pro feature. Repository scanning is listed as not included yet.

Read /pricing and the site root before you pay. Quote the page you actually checked out on, not a blend of the two.