← Back to Discover

VibeDoctor

A scanner for apps written with AI coding agents. It runs 149+ checks on a repo and its live site and returns one ranked report covering secrets, auth, dependencies, performance and SEO.

Code & secrets securityCode review
Visit website ↗

What it does

VibeDoctor scans a GitHub repo, a deployed site or both for the problems the site says coding agents tend to leave behind: keys committed to source, unprotected routes, missing rate limits, imports of packages that do not exist, duplicated logic and slow pages. A scan runs 149+ checks across 21 diagnostic areas and returns a ranked report with file paths, typically in under two minutes. It can connect to a coding agent over MCP, so findings arrive in the chat where the code was written. The page lists Claude Code, Codex, Cursor, Windsurf and Cline, and setup is a single pasted line. Access is read-only: it does not write to your code, deletes its copy of a repo after scanning, and says your code is never used to train AI. The product also includes Vibe X-Ray, a visual explorer of modules, files and symbols, Vibe Story, which explains an app in plain English, and Vibe Monitoring for uptime, SSL alerts and Lighthouse scores. The site names tools such as opengrep, gitleaks and trivy among its engines and adds checks aimed at AI-generated code. It covers JavaScript and TypeScript, Python, Go, Ruby, Java, PHP and Rust.

Capabilities

  • 149+ checks across a repo and its deployed site
  • One ranked report with file paths and copyable AI fix prompts
  • Flags imports of packages that do not exist
  • MCP connection for Claude Code, Codex, Cursor, Windsurf and Cline
  • Vibe X-Ray code map plus uptime and SSL monitoring
  • Read-only access, including private GitHub repos

When to use it

  • You ship an app that an AI agent mostly wrote and want a second look before users find the holes
  • You want security and quality findings delivered inside your coding agent's chat
  • You want regular scans of a repo and its live site

Alternatives to explore

  • SonarQube
  • Snyk
  • CodeRabbit