Aikido
Application security platform- Price
- $0
- Free tier
- Yes
Checks
- Source
- Secrets
- Live URL
One dashboard for dependency, code, secret, and cloud findings when you do not want to assemble separate scanners.
Verified Oct 13, 2026 · aikido.dev
Supabase's October 30 change: new public tables need a grant for Data API access. What to doSupabase's October 30 change is live: new public tables need a grant for Data API access. What broke and how to fix it
A short directory, not a ranking. Each entry says what the tool is best for and whether a public page described a free tier. If a number was not on that page, it stays unstated. Facts below were checked on 2026-11-02. Pricing changes. Open the source link before you buy or refuse something. A featured listing sits first in its category and is labeled Featured. That placement does not change a comparison table. How a featured listing works is on the sponsor page.
Last updated
24 tools · 139 fixes · 42 issue guides · Updated Nov 12, 2026 · Sources: Supabase, GitHub, postgresql.org, Vercel + 53
10 of 24 tools match
Checks
One dashboard for dependency, code, secret, and cloud findings when you do not want to assemble separate scanners.
Verified Oct 13, 2026 · aikido.dev
Checks
Pattern-based code scanning you can run locally or connect to GitHub, with a free cloud tier for small teams.
Verified Oct 13, 2026 · semgrep.dev
Checks
Scan a project directory for known vulnerabilities, misconfigurations, and secrets.
Verified Oct 22, 2026 · github.com
Checks
Finding known credential patterns that were committed to a GitHub repository, and blocking some pushes before they land.
Verified Oct 13, 2026 · docs.github.com
Checks
Search a git history or a directory for credentials, then check whether a classified secret can still log in.
Verified Oct 22, 2026 · github.com
Checks
A free read-only scan of a public site while the product is being rebuilt.
Verified Oct 22, 2026 · amihackable.dev
Checks
A live-URL check aimed at vibe-coded apps, with a paid unlock for the full write-up.
Verified Oct 22, 2026 · safetoship.dev
Checks
A scan of a deployed app for secrets in JavaScript, missing Supabase RLS, weak auth, and missing headers.
Verified Oct 22, 2026 · vibeappscanner.com
Checks
A read-only inspection of a deployed URL, including Supabase keys and row level security, without uploading source.
Verified Oct 22, 2026 · vibecheck.themeridianlab.com