Observed arrival · 2026-10-29

VibeSafe: a security check for vibe-coded apps

vibesafe.org Visit website

Editorial interest 78/100 Selection signal · not a rating of the site

A passive scanner for AI-assisted apps that checks public bundles, headers, source maps, and common Supabase exposure, with paid remediation reports.

Landing page captured for the 2026-10-29 issue.

For: Developers checking AI-assisted apps they have already deployed
Worth noticing: Supabase checks use one read-only limit=1 request; checks for /.env and /.git use HEAD without downloading those files.

Field notes

The scan is described as requesting a submitted URL with GET and HEAD, examining its public HTML, scripts, headers, source maps, and a few common paths. If an anon Supabase key appears, the page says it sends one read-only limit=1 request to common tables; checks for /.env and /.git use HEAD rather than downloading those files. Findings are graded, and the paid report adds explanations and paste-ready prompts.

Observed signals

Read the marks

Editorial observations of this landing page, not a rating.

○OpenPublic substance visible

$PaidCommerce or pricing visible

✦PrettyNotable craft visible

●ProPolished or operationally mature

◎NicheUnusually specific use

ƒJavaScriptBrowser-side code central

One card from the complete issue

Files in the Viewfinder

320,330 arrived 1,000 judged 974 catalogued Enter the complete issue