VibeAlarm

VibeAlarm is a smoke alarm for apps built with Lovable, Bolt, Replit, Cursor, and v0. Key features: • Free public check that shows what a stranger can already see on your site • Scans the homepage, scripts, TLS setup, security headers, robots.txt, and sitemap • Flags exposed API keys and database configuration visible in public pages • Recorded flow tests for sign-up, login, checkout, and expected text • Daily checks with email alerts when a passing check starts failing • Fix prompts you can paste straight back into your builder. The free check needs no sign-up and does not submit forms or log in. It is a passive look at public pages, not a full security audit. Paid plans let you verify your domain with DNS, a meta tag, or a file, then record visit, fill, click, and expect-text steps using a test login. Monitor covers one app for $19 per month, and Watch covers five apps for $49 per month with a weekly pass for leaked keys. Built for indie founders, solo makers, and small teams who ship quickly with vibe-coding tools and need to know when something quietly breaks or leaks data. Use it before launch, after each major edit, or whenever a site that once worked starts behaving differently.