coded apps

vibecheck offers robust security scanning for GitHub repositories, designed for rapid application development. • Integrates Gitleaks for secrets detection • Utilizes Semgrep for OWASP rule checks • Employs njsscan for headers and authentication analysis • Includes custom checks for database row-level security and unprotected API routes • Provides clear explanations and prioritized findings This tool helps address security gaps that can arise from accelerated development practices. It performs comprehensive static analysis, identifying common vulnerabilities related to secrets exposure, access control, injection risks, server-side issues, authentication and session management, and framework-specific weaknesses in Node.js applications. Findings are presented with detailed explanations, allowing developers to understand and remediate potential security flaws efficiently. vibecheck is ideal for solo developers and small engineering teams who need to ensure code integrity without extensive manual security audits. It's especially useful for projects involving accelerated code generation, providing an essential layer of oversight before deployment. The service offers a free tier for one repository, making it accessible for evaluating project security.