YOUR AI CODE
HAS BLIND
SPOTS.
VibeCheck scans your vibe-coded repos with 20 AI security rules and catches vulnerabilities before they ship. Fast, brutal, accurate.
20
AI Security Rules
4ms
Avg Response
98%
Detection Rate
$0
To Start
How much
are leaks costing you?
A single exposed API key can cost thousands overnight. Move your prompt volume through VibeCheck Shield and see what you save.
$0.05
per 1K prompts
∞
potential savings
Loss Prevention Calculator
Security that
ships with you.
Secret Leakage
Detects hardcoded API keys, tokens, and passwords. OpenAI, AWS, GitHub patterns covered.
Prompt Injection
Catches direct user input going straight into LLM prompts without sanitization.
Code Execution
Flags eval(), dynamic functions and shell execs that could run LLM output as code.
Data Logging
Finds sensitive prompts and user data being logged — a GDPR ticking bomb.
CORS & Auth Gaps
Wildcard CORS and unprotected AI endpoints that anyone on the internet can hit.
Prompt Shield
Real-time firewall API that blocks jailbreak attempts before they reach your model.
Three steps.
Zero excuses.
Paste URL
Drop in any public GitHub URL. No install, no setup, no BS.
AI Scans
Our engine clones and runs 20 security rules across every file in under 2 minutes.
Get Report
Severity-ranked findings with line numbers, descriptions, and fix suggestions. We email it too.
Live scanner.
Free. Right now.
Public repos only in demo mode · Sign up for private repo access
Recent Scans
No scans yet.
Scan from your terminal
Zero config. One command. Works on any public GitHub repo — no account needed.
Three ways to use it
npx @thelab.lat/vibecheck scan <url>
npm i -g @thelab.lat/vibecheck
vibecheck scan --fail-on critical
name: VibeCheck Security Scan
on: [pull_request]
jobs:
security:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Run VibeCheck
run: npx @thelab.lat/vibecheck scan ${{ github.repositoryUrl }} --fail-on critical
Simple.
No surprises.
- 100 scans/month
- Full detailed report
- API key access
- Email alerts
- Scan history
- Unlimited scans
- Everything in Pro
- Team access
- Webhooks & CI
- Priority support
Teams that
ship safer.
We caught prompt injection attacks our entire appsec stack missed. VibeCheck paid for itself in a week.
Fits perfectly in our CI pipeline. Reports are crisp, executive-ready, and genuinely useful.
We ship AI features fast. VibeCheck is the safety net that keeps our users data safe.