Vibe App Watchdog

Vibe App Watchdog checks apps built with Lovable, Bolt, Cursor, Replit, v0, and Supabase for security gaps that are easy to miss. Paste a URL you own and get a graded report in about 30 seconds. Key checks: • Exposed API keys in the page's JavaScript, including Stripe secret keys and Supabase service_role tokens • Missing security headers such as Content-Security-Policy, clickjacking protection, and nosniff • Cookie flags and open CORS settings • Plain HTTP on public hosts • Sensitive files that should not be publicly reachable The scan is passive. It reads only what the browser already receives, with no logins, database probes, writes, or brute force. Each result is graded from A to F, and the public grade can be shared as a badge. The scan does not read database rules, so review those separately. Fix reports are $9 and include a prompt for each problem. For ongoing protection, a $9 monthly plan rechecks your app every week. Built for founders, indie developers, and small teams shipping quickly with vibe coding tools who want to confirm their launch is not exposing secrets before users arrive.