VibeCheck

Pre-launch security and privacy self-audit for vibe-coded apps

Problem

More non-professional developers are shipping AI-generated apps, often with missing Firebase rules and exposed user data. One post exposed Project Sadak leaking its entire database due to absent Firebase rules, compromising all reports and user data. Such incidents recur in vibe coding communities, but authors don't know where to start.

Solution

Users provide a repo or Firebase project; the tool scans for common misconfigurations: public Firestore/Storage rules, hardcoded keys, unauthenticated APIs, overly permissive CORS. It generates a plain-language risk report with fix steps that non-developers can follow.

Users

Non-CS indie developers, vibe coding beginners, and small teams that just launched an MVP.

MVP

Support GitHub repo URL or Firebase project import; check Firestore/Storage public rules; scan frontend code for hardcoded secrets; output an actionable security report.

Revenue

Free scan for one project; $10/month subscription for multiple projects and continuous monitoring of new commits; $5 per one-off report.

Why now

AI-generated code lets non-coders ship products, causing an explosion of security holes; traditional scanners are too complex for non-developers, creating demand for a consumer-grade experience.