Free basic scan
Scanner
A free check for common problems in a vibe coded app. This version is a layout only. It does not upload your code, call a server, or produce a report.
When the scanner runs, a result will be a hygiene check, not a security guarantee. Nothing on this page is a scan.
What a basic scan will check
Secrets left in the project
1
Keys, tokens and private URLs committed by accident.
Install scripts
2
A dependency step that fetches or runs something the readme does not mention.
Open admin paths
3
Routes that look sensitive and have no check we can see in the code.
Debug left on
4
Verbose errors, sample data endpoints, and flags that should be off in public.
Headers and cookies
5
Missing basics such as a content security policy, or a session cookie with no sensible flags.
Browser only protection
6
A check that exists in the page, and not on the server that actually keeps the data.
Try the layout
The field below is here so you can see the form. The address is not given a name, so it is not submitted.
Nothing is sent from this page. The scanner has no backend in this version.
What a result will look like
Example data
Example Arcade
Sample of the result layout for a fictional app. This is not a scan, and Example Arcade is not a real project.
Secrets
Concern
Sample only: a settings file contains a made up key string.
Headers
Note
Sample only: the fictional config sets no content security policy.
Routes
Concern
Sample only: an admin path in the fiction has no check we can see.
What this page does not do
- It does not read a repository, a zip, or a live site.
- It does not sign in, and it does not ask you to prove you own an app.
- Paid reports are not on sale in this version.
Grades are a hygiene check, not a security guarantee.