Free security scanner for vibe coders

You built it with Claude Code
Let's make sure it's secure.

Instant security scan for your AI-generated code. Find vulnerabilities, exposed secrets, and dependency issues before you ship.

Built for Vibe Coders

AI-Ready Fix Prompts

You built it with AI. Fix it with AI.

Scan finds issues

SQL injection, XSS, exposed secrets — we catch it all

Get the fix prompt

One-click copy with file, line, and exact fix instructions

Paste to your AI

Claude, Cursor, ChatGPT, Gemini — they all understand it

master-fix-prompt.md Copy & Paste Ready

# Security Fix Guide for my-startup-app

Fix 12 security vulnerabilities in priority order.

3 Critical 4 High 3 Medium 2 Low

Quick Wins: 5 issues fixable in under 5 minutes each

---

## 1. SQL Injection (Critical)

src/db/users.ts:47

db.query(`SELECT * FROM users WHERE id = $${userId}`)

db.query('SELECT * FROM users WHERE id = $1', [userId])

## 2. Hardcoded Stripe Key (Critical)

src/services/stripe.ts:12

const STRIPE_KEY = 'sk_live_4eC39HqLyjWD...'

const STRIPE_KEY = process.env.STRIPE_SECRET_KEY

## 3. JWT Secret Exposed (Critical)

src/auth/jwt.ts:8

const JWT_SECRET = 'super-secret-key-123'

const JWT_SECRET = process.env.JWT_SECRET

## 4. XSS in Comments (High)

src/components/Comment.tsx:28

dangerouslySetInnerHTML={{__html: comment}}

dangerouslySetInnerHTML={{__html: DOMPurify.sanitize(comment)}}

## 5. Missing Auth on Admin Route (High)

src/api/admin/users.ts:15

export async function GET(req) { ... }

export async function GET(req) { await requireAdmin(req); ... }

## 6. Command Injection (High)

src/utils/pdf.ts:34

exec(`convert $${filename} output.pdf`)

execFile('convert', [filename, 'output.pdf'])

## 7. Path Traversal (Medium)

src/api/files.ts:22

const file = path.join(uploadsDir, req.params.name)

const safeName = path.basename(req.params.name)

---

Let me find the security vulnerabilities in your repo too

and give you a master prompt to fix it all.

Get your own scan above. It's free.

To ship better products with vibe coding!

Quick wins marked for easy fixes

Exact file and line numbers

Before/after code examples

Severity-ordered for priority

Security Analysis

What we scan

Code Security

SQL injection, XSS, insecure auth patterns, and 3,500+ security patterns across 16 parallel scanners.

Exposed Secrets

API keys, database URLs, JWT secrets, and credentials that shouldn't be in your code.

Dependencies

Known CVEs in your npm, pip, or cargo packages with upgrade recommendations.

Authentication

Weak password policies, missing rate limiting, insecure session handling, and auth bypasses.

Database Security

NoSQL injection, ORM misuse, unparameterized queries, and data exposure risks.

API Security

CORS misconfigurations, missing auth on endpoints, and insecure data serialization.

File Handling

Path traversal, unrestricted uploads, insecure file permissions, and directory exposure.

Injection Attacks

Command injection, LDAP injection, template injection, and code execution vulnerabilities.

Cryptography

Weak algorithms, hardcoded keys, improper random generation, and insecure hashing.

Simple Process

How it works

Paste your repo URL

Public GitHub or GitLab repos. No signup, no OAuth, just paste and scan.

We scan everything

Industry-standard security tools and vulnerability databases.

Ship the fix

Get clear recommendations for each issue, or just point your AI to it and let it cook.

For AI Assistants

MCP Integration

Use Vibeship Scanner directly in Claude, Cursor, or any MCP-compatible assistant.

claude mcp add vibeship-scanner -- npx mcp-remote https://scanner.vibeship.co/mcp

scanner_scan

Start a security scan on any GitHub repo

scanner_master_prompt

Get AI fix guide with task list for systematic fixing

scanner_lookup_cve

Look up CVE details from NVD database

scanner_status

Check scan progress with live updates

Example conversation

You Scan my repo for security issues

Claude Found 12 vulnerabilities (3 critical, 4 high). Should I fix these issues?

You Yes, fix them

Claude Creating task list and working through each fix systematically...

Learn more about MCP

Ready to ship with confidence?

Free. No signup required on public repos.

for vibe coders

You built it with Claude Code Let's make sure it's secure.