VibeShield

What it is

VibeShield is an audit workspace for people building websites with AI coding tools. It brings security, accessibility, search readiness and bundle analysis into one report, with evidence and practical next steps. Use it before launch, after a change or when reviewing a client website. Start with a URL; Business also lets you inspect a GitHub repository.

Questions from the bench

What does VibeShield do?

It helps vibe coders review security risks, accessibility barriers, technical SEO/AEO readiness and browser bundles on public pages. Findings include evidence and fix guidance. The anonymous scan covers a limited security scope; a free account adds all four tools without domain verification.

Is scanning safe for my app?

Checks are read-only by default. Optional active checks on Pro and Business send crafted requests after hostname verification and are designed to avoid destructive testing, credential guessing and denial of service. Every target behaves differently, so use active testing only on systems you are authorized to test.

Do I need to verify my domain?

SEO, accessibility, bundle and passive security audits work on website URLs without verification. Active security probes require ownership proof via an HTML meta tag or a .well-known verification file. The free homepage instant scan stays a lightweight public check with no signup.

Do you need my login or database credentials?

Website audits use the URL and do not require the target app's login or database credentials. GitHub integration is separate: a connected token provides access to private repositories and enables pull-request comments. That token is encrypted at rest.

What's the difference between Free, Pro, and Business?

Basic is free with 10 scans/month, 1 saved domain and 1 page per scan. Pro is $19/month with 50 scans, 5 domains and up to 3 pages, plus verified active checks, weekly monitoring and exports. Business is $39/month with 150 scans, 15 domains and up to 5 pages, plus daily scans, GitHub and team alerts.