About VibeScan

VibeScan is built by Gautam Umapathy to help people check the public security surface of the web apps they ship. It is designed for builders using Lovable, Bolt, Cursor, Claude and other development tools who want a practical first pass before launch and a way to recheck reported issues after a fix.

What the product does

A URL scan checks publicly reachable pages and assets for signals such as exposed secrets, accessible data, weak security headers and other configuration issues. Dependency inventory modes match supplied package versions against advisory data. Detailed reports add remediation prompts for the builder's workflow.

What the results mean

A finding is an automated observation that needs context. A clean result is not a guarantee of security, and blocked or incomplete checks are not passes. VibeScan does not replace an authenticated security review, source-code audit, penetration test or compliance assessment. Scan only apps you own or have explicit permission to test.

The published research report describes its sample and limitations. The live product counter measures usage; it does not count verified customers or establish how common vulnerabilities are across all AI-built apps.

Contact and resources

For product questions, billing help or corrections, email support@vibe-scan.app. Read the developer guide, privacy policy and terms for integration and data-handling details.