Vibe Check Scan
A security check for your app
Check your app for missing protections and accidentally exposed files.
Free to use. No account needed.
What we check
The basics, checked
Security Headers
Browser protection
Checks settings that help browsers protect your visitors.
TLS/SSL
Encryption in transit
Checks your HTTPS certificate and connection.
CORS Policy
Data sharing rules
Checks which other websites can read responses from your app.
API Surface
What is publicly reachable
Looks for files and data you may not have meant to share.
React / Next CVEs
Known advisories
Checks detectable versions against known security advisories.
How this scan works
We request public pages and files to check their responses. We do not sign in or attempt to exploit your app.
A starting point
Your score covers these checks, not every possible issue. A high grade is not a guarantee of security.
For developers and agents
The scanner is API-driven. No API key. POST /api/scan/start · API docs