vibe eval - ai security testing for vibe-coded apps
About Vibe Eval
AI-powered dynamic security testing for vibe-coded web apps. Paste a deployed URL and autonomous agents probe it like an attacker would, checking for missing Supabase/Firebase RLS, exposed API keys, auth bypasses, broken CORS, open storage buckets, and IDOR. Findings ship with a captured exploit and reproducible proof of concept, plus fix prompts ready for Claude Code, Cursor, or Lovable.
Key Capabilities
Scans deployed URLs directly, no source code access needed
310+ security probes tuned to AI-generated app patterns
Findings include a captured exploit and reproducible PoC
Fix prompts formatted for Claude Code, Cursor, and Lovable
Daily re-scans catch regressions as you keep shipping
Free single-purpose tools like Token Leak Checker and Supabase RLS Probe
Standout Features
Attacker-Style Probing
Agents map your app's routes and attack them with 310+ probes, proving exploits in a sandbox.
Proof-Based Findings
Each finding ships with the captured request, response, and a reproducible proof of concept.
AI Fix Prompts
Findings convert to fix prompts formatted for Claude Code, Cursor, and Lovable.
Daily Re-Scans
Scheduled scans re-test your app every day to catch regressions between releases.
Perfect for
Compare Vibe Eval
Community Buzz
Community Buzz
No recent posts yet
We are monitoring X for fresh discussions about Vibe Eval.
Similar Tools to Vibe Eval
Jotform AI App Builder
No-code AI app builder from Jotform that turns a prompt, file, URL, screenshot, or voice note into a working web and mobile app with pages, navigation, forms, workflows, and dashboards. Built on Jotform's form and data components, so it is strongest for form-heavy internal tools, client portals, and data-driven apps. Free to use, with form, submission, and user limits set by your underlying Jotform plan.
Retool
Low-code platform for building internal tools, admin panels, and dashboards. Retool combines 90+ drag-and-drop UI components with JavaScript extensibility and AI app generation to connect any database or API.
Hermes WebUI
Lightweight dark-themed browser interface for Hermes Agent with full parity to the CLI. Three-panel layout with sessions sidebar, chat, and workspace file browser. Community project that runs against any existing Hermes install.
Atoms
AI employees that validate ideas, build products, and acquire customers in minutes, without coding. A multi-agent crew runs research, planning, full-stack build (frontend, backend, database, auth, Stripe), deployment via Atoms Cloud, and post-launch growth with built-in SEO and ads agents. Designed for founders who want a faster path from idea to a launchable product, not just another prototype generator.
VibeCodeSecure
Free, no-login web scanner built for vibe-coded apps. Paste a web app or API URL and it checks security headers, TLS/SSL, authentication controls, and infrastructure configuration for common vulnerabilities and misconfigurations. Tuned for apps shipped from platforms like Replit, Databutton, and Cursor.
Google Disco
Google's experimental AI browser that turns open tabs into ephemeral apps. Uses Gemini 3 to create checklists, planners, and comparison tables instantly.
ready to try vibe eval?
join thousands of developers already using Vibe Eval.
try vibe eval now