Overview
Scan your vibe-coded app for exposed databases, leaked keys, and config leaks — before you get burned.
VibeScan checks a web app you own or control for the security mistakes that get indie and "vibe-coded" apps hacked before someone else finds them. > With one click it scans the page you're on for: > Publicly readable databases a Supabase project with missing Row-Level Security, or an open Firebase database, that anyone could read. > Leaked API keys & secrets** — Stripe, OpenAI, AWS, Supabase service keys and more, accidentally shipped in your frontend code. > Exposed config reachable `.env`, `.git`, or source-map files. > Missing security headers clickjacking and other hardening gaps. > You get a clear A–F security grade, a plain-English explanation of each issue, and a ready-to-paste prompt you can drop into your AI coding tool (Cursor, Lovable, Claude, v0) to fix it. > > Private by design. The scan runs locally in your browser. We never store your app's data or the secret values we find only the counts and grade, and only if you choose to sign in to save your history. > Built for the people shipping fast: scan your own app, see what's exposed, fix it in minutes.
Details
- Version1.1.0
- UpdatedJuly 18, 2026
- Size12.13MiB
- LanguagesEnglish (United States)
- DeveloperWebsite
Email
contact@appflint.online - Non-traderThis developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.
Privacy
VibeScan — App Exposure Scanner has disclosed the following information regarding the collection and usage of your data. More detailed information can be found in the developer's privacy policy.
VibeScan — App Exposure Scanner handles the following:
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes
Support
For help with questions, suggestions, or problems, visit the developer's support site
