VibeSecret – AI Code Leak Scanner

Scan AI-generated code for secrets and sensitive data to prevent vibe coding leaks

Problem

A V2EX user reported that after his company adopted vibe coding, their Alibaba Cloud access key leaked twice, and a colleague's GCP key leak led to a $10k credit card fraud. He even wrote his own tool to desensitize data for LLMs, highlighting the lack of AI-coding-specific security checks.

Solution

A local CLI tool that scans AI-generated code for hardcoded secrets, API keys, and tokens; supports custom rule matching for company-specific key formats; offers a pre-commit hook to block leaks before commit; and generates desensitized code snippets for safe AI continuation.

Users

Developers and small teams using AI coding tools like Cursor, Copilot, and Claude Code

MVP

Scan local project directories for .env, .config, and source files using common secret regex; pre-commit hook integration; JSON report output; basic VS Code extension.

Revenue

Freemium: free basic scanning, subscription for advanced rule library, team policy management, and audit logs ($9/user/month).

Why now

Vibe coding is exploding, but security tools remain enterprise-focused. Solo developers and small teams lack lightweight, local-first protection.