VibeAudit

What is VibeAudit?

VibeAudit is a pre-launch audit for apps made with AI coding tools such as Cursor, Lovable, Bolt.new, v0, Replit and Claude Code. You paste a public GitHub URL, or sign in with read-only GitHub access for a private repository, and the service reads the code with a security-first brief and returns a readiness score and a list of risks. Each finding cites a file and line, explains why it matters and comes with a fix prompt you can paste into your AI editor. The report focuses on who can see which user's data, what happens when money moves, and which keys or endpoints the browser exposes. The free scan covers the highest-risk files and shows the top finding in full. A deep audit reads more of the repo, up to about 280K tokens of source, re-checks critical and high findings and exports Markdown. Deep audits are one-time payments, with $12 per repo within 24 hours of the free scan and a standard price of $19. A GitHub Action can post scores on pull requests. Reports are AI-generated and not a penetration test.

Use cases

• Audit an AI-built app before launch
• Find missing ownership checks in API routes
• Catch exposed keys and secrets
• Review payment and webhook logic
• Get paste-ready fix prompts for an AI editor
• Score pull requests with a GitHub Action
• Re-audit a repo after applying fixes

Who it's for

• Vibe coders
• Indie makers
• Startup founders
• Developers shipping AI-built apps

Why use VibeAudit

• A free first look needs no card and, for public repos, no account.
• Findings come with the file and line, so you can locate the problem quickly.
• Fix prompts can be pasted into the AI editor you already use, then re-checked with a new audit.
• One-time payments mean there is no subscription to cancel.
• Source is processed in memory and only the report is stored, with read-only repo access.

VibeAudit features

• Scan of a public GitHub repo with no account needed
• Read-only GitHub access for private repositories
• Readiness score and finding titles
• File-and-line findings with fix prompts
• Deep audit of up to about 280K tokens of source
• Second review of critical and high findings
• Markdown export of the report
• VibeAudit Scan GitHub Action for pull requests
• Emailed report with optional follow-ups

VibeAudit integrations

• GitHub
• Cursor
• Lovable
• Bolt.new
• v0
• Replit
• Claude Code
• PayPal

How to get started with VibeAudit

1. Paste a public GitHub URL, or sign in with GitHub to pick a private repository.
2. Run the free scan to get a readiness score and finding titles, with the top finding opened fully.
3. Buy a deep audit to review more of the repo and get a second pass on serious findings.
4. Paste each finding's fix prompt into your AI editor and review the changes.
5. Audit again to confirm the fixes.

VibeAudit limitations

• Reports are AI-generated and are not a security certification or penetration test
• Free scans are capped per day, and each repository has a cooldown between scans
• The free scan shows only the top finding in full
• Findings can include false positives or miss issues

VibeAudit pricing

Yes, VibeAudit has a free plan. Paid plans start at $12 one-time, according to the official pricing page on 24 Oct 2026.

VibeAudit plans

• Free

  Free

  • Readiness score and finding titles
  • Top finding and fix prompt revealed
  • No account for public repositories
  • Daily limits and repository cooldown

• Deep audit

  $12 /repo

  within 24 hours of your free scan; standard price $19

  • Reviews up to about 280K tokens of source
  • Second review of critical and high findings
  • Fix prompts and Markdown export

• Re-audit

  $9

  within 30 days of a completed paid audit

  • Re-run on the updated repository

• 5-pack

  Price on vendor site

  • Credits do not expire

Plans as listed on the official pricing page on 24 Oct 2026. Prices can change and may vary by country or exclude tax. Check the official pricing page.

VibeAudit alternatives

The main VibeAudit alternatives listed on Debuly are Semgrep, CodeRabbit, VibeDoctor, Gito, Greptile and Nullify. The table compares pricing and platforms; order is A–Z.

1. 

   CodeRabbit

   AI code review for pull requests, IDEs and the CLI, with pre-merge checks, one-click fixes, triage and security scans.

   CodingDeveloper platformsAutomation and agents
   FreemiumVisit CodeRabbit (official site)
2. Gi

   Gito

   Open-source AI code reviewer that checks GitHub pull requests and local changes with the language model provider you choose.

   CodingDeveloper platformsAutomation and agents
   Open sourceVisit Gito (official site)
3. 

   Greptile

   AI pull request reviewer that maps your whole repository, so each review weighs the change against code outside the diff.

   CodingDeveloper platforms
   FreemiumVisit Greptile (official site)
4. 

   Nullify

   Autonomous product security platform that finds vulnerabilities, proves exploitability and opens merge-ready fix pull requests.

   CodingAutomation and agentsDeveloper platforms
   Contact salesVisit Nullify (official site)
5. 

   Semgrep

   Application security platform for static analysis, supply chain and secrets scanning, with AI-assisted triage and fixes for developers and coding agents.

   Developer platformsCoding
   FreemiumVisit Semgrep (official site)
6. 

   VibeDoctor

   Scans and monitors AI-built apps with 149-plus checks for security, performance and code quality, plus fix prompts.

   CodingDeveloper platformsAutomation and agents
   FreemiumVisit VibeDoctor (official site)

VibeAudit FAQ

Sources & verification

Facts on this page come from the official sources below, each with the date we read it. Written by Debuly; the vendor did not review this page.

Image credits

• Logo: from vibeaudit.sh · fetched 24 Oct 2026 · Vendor trademark, used only to identify the product; removed on request
• Cover: none collected yet, so a generated tile is shown.

Spot an error? Report an issue with this listing. We also remove a logo or image on the owner's request.