Aikido
Application security platform- Price
- $0
- Free tier
- Yes
Checks
- Source
- Secrets
- Live URL
One dashboard for dependency, code, secret, and cloud findings when you do not want to assemble separate scanners.
Verified Oct 13, 2026 · aikido.dev
Supabase's October 30 change: new public tables need a grant for Data API access. What to doSupabase's October 30 change is live: new public tables need a grant for Data API access. What broke and how to fix it
A short directory, not a ranking. Each entry says what the tool is best for and whether a public page described a free tier. If a number was not on that page, it stays unstated. Facts below were checked on 2026-11-02. Pricing changes. Open the source link before you buy or refuse something. A featured listing sits first in its category and is labeled Featured. That placement does not change a comparison table. How a featured listing works is on the sponsor page.
Last updated
24 tools · 139 fixes · 42 issue guides · Updated Nov 12, 2026 · Sources: Supabase, GitHub, postgresql.org, Vercel + 53
21 of 24 tools match
Checks
One dashboard for dependency, code, secret, and cloud findings when you do not want to assemble separate scanners.
Verified Oct 13, 2026 · aikido.dev
Checks
Scanning dependencies, code, containers, and infrastructure-as-code from an IDE, CLI, or git host, with a free plan for individuals and small teams.
Verified Oct 13, 2026 · snyk.io
Checks
A source-first security audit you run inside a coding agent, with separate agents to hunt and to check each finding.
Verified Oct 14, 2026 · github.com
Checks
Finding insecure patterns in a repository's code with CodeQL, especially on a public GitHub repo.
Verified Oct 21, 2026 · docs.github.com
Checks
Code scanning
Automatic fixes for findings that another scanner already reported, free on public repositories.
Verified Oct 22, 2026 · mobb.ai
Checks
Pattern-based code scanning you can run locally or connect to GitHub, with a free cloud tier for small teams.
Verified Oct 13, 2026 · semgrep.dev
Checks
Scan a project directory for known vulnerabilities, misconfigurations, and secrets.
Verified Oct 22, 2026 · github.com
Checks
The scan Lovable runs on a project you built there, including a check of Row Level Security before publish.
Verified Oct 22, 2026 · lovable.dev
Checks
Dependencies
Alerts and pull requests when a dependency you already use has a known vulnerability.
Verified Oct 13, 2026 · docs.github.com
Checks
Dependencies
A local look at known vulnerabilities in the packages already installed in a JavaScript project.
Verified Oct 13, 2026 · docs.npmjs.com
Checks
Dependencies
Match a project's lockfiles to known vulnerabilities in the OSV database, including npm.
Verified Oct 22, 2026 · google.github.io
Checks
Dependency supply chain
Catching malicious or surprising dependency behavior, not only packages that already have a CVE.
Verified Oct 13, 2026 · socket.dev
Checks
Payments
Forwarding Stripe webhook events to a local server so you can test signature verification.
Verified Oct 13, 2026 · docs.stripe.com
Checks
Finding known credential patterns that were committed to a GitHub repository, and blocking some pushes before they land.
Verified Oct 13, 2026 · docs.github.com
Checks
Search a git history or a directory for credentials, then check whether a classified secret can still log in.
Verified Oct 22, 2026 · github.com
Checks
A free read-only scan of a public site while the product is being rebuilt.
Verified Oct 22, 2026 · amihackable.dev
Checks
A quick public report on what a URL loads and whether Cloudflare had a malicious-content verdict.
Verified Oct 13, 2026 · radar.cloudflare.com
Checks
A live-URL check aimed at vibe-coded apps, with a paid unlock for the full write-up.
Verified Oct 22, 2026 · safetoship.dev
Checks
A scan of a deployed app for secrets in JavaScript, missing Supabase RLS, weak auth, and missing headers.
Verified Oct 22, 2026 · vibeappscanner.com
Checks
A read-only inspection of a deployed URL, including Supabase keys and row level security, without uploading source.
Verified Oct 22, 2026 · vibecheck.themeridianlab.com