Launch
VibeLegit
Visit
Example Image

VibeLegit

Live security scanner for vibe-coded sites — finds exposed d

Visit

VibeLegit scans sites built with Lovable, Cursor, Bolt and other AI coding tools for security vulnerabilities and legal compliance issues. It sends real HTTP requests to your live site — not just reads the code — checking for exposed .env files, disabled Supabase RLS, API keys in the JS bundle, missing privacy policies, and more. Also scans your GitHub repo for hardcoded secrets. Every finding comes with an AI-generated fix prompt ready to paste into your coding tool.

Example Image
Example Image
Example Image
Example Image

Features

Live HTTP scanning — 17+ real requests to your live site

GitHub deep code scan for hardcoded secrets and injection risks

GDPR and legal compliance checks

AI-generated fix prompts for every finding

Continuous monitoring with weekly re-scans and instant alerts

Public security leaderboard

Use Cases

Scan your Lovable or Cursor app before launch

Find exposed API keys and database credentials

Check GDPR compliance and missing privacy policies

Monitor your site for new vulnerabilities after every deploy

Get AI fix prompts to paste directly into Cursor or Lovable

Fazier Deal

Comments

Hey! Solo founder here. Built VibeLegit after I kept seeing the same security mistakes on AI-built sites — exposed .env files, Supabase RLS off, no privacy policy. Nobody was catching this stuff before launch. It actually probes your live site with real HTTP requests instead of just reading the code. Found critical issues on 94% of the sites we tested. Happy to run a free scan if anyone's curious what's on their site

Social Links

Comments

Hey! Solo founder here. Built VibeLegit after I kept seeing the same security mistakes on AI-built sites — exposed .env files, Supabase RLS off, no privacy policy. Nobody was catching this stuff before launch. It actually probes your live site with real HTTP requests instead of just reading the code. Found critical issues on 94% of the sites we tested. Happy to run a free scan if anyone's curious what's on their site