Vibio

Vibio is a read-only scan tool for finding security and vulnerability issues in apps before launch. It is used for production-readiness audits by experienced developers, solo builders, vibe coders, and teams, and it is described as a production-readiness checklist that reads code rather than relying on guesswork.

It runs 50+ checks and validates findings with AI. The URL scan works without repository access and checks public-facing surfaces such as headers, exposed keys, rate limiting behavior, CORS configuration, and basic auth surfaces. The repository scan connects to GitHub with read-only permissions and produces file-level evidence, including file paths, line numbers, and code snippets. Vibio also performs AI review to validate deterministic findings and to look for deeper problems such as auth logic flaws, error handling gaps, and cookie misconfigurations. Its coverage includes auth and sessions, guards and validation, secret leakage, CORS, XSS, SQL injection, payments and webhooks, CI/CD, type safety, tests, observability, database migrations, and dependencies.

Findings are grouped into ordered Fix Packs, prioritized by severity, with step-by-step guidance. The workflow shown on the page includes URL or repo scanning, deterministic checks plus AI deep review, and then applying fix packs; the fix packs can include Cursor prompts and pull requests. The tool works with Next.js, NestJS, Express, Fastify, TypeScript, JavaScript, Supabase, Prisma, and Stripe.

Vibio is available on the web and offers a free trial. The page also states that it does not store source code, instead extracting code into a temporary workspace for the duration of the scan and deleting that workspace after analysis. GitHub access is read-only.