Built for vibe-coded sites
Is your site secure?
Paste the URL of your site. We'll probe it for the vulnerabilities most vibe-coded apps ship with.
Secure accounts
Email/password and Google sign-in, with sessions handled server-side.
Immutable history
Every scan is append-only — past results can't be tampered with.
Rate-limited
Per-user rate limits and credit deduction prevent abuse.