Question 1

What is TheVibeSecurity?

Accepted Answer

TheVibeSecurity is a web-based security scanner for apps built with AI coding tools such as Lovable, Bolt, Cursor, Replit and v0. You paste your app's URL and it checks, read-only, for exposed API keys, open Supabase or Firebase databases, exposed .env and .git files, missing security headers and unprotected admin routes, then gives you a fix prompt to paste back into your AI tool. Every scan also scores the site for SEO, AEO and GEO. The first plan is free and needs no card.

Question 2

Is the scan safe for my live app?

Accepted Answer

Yes. Every check is read-only. We never write, modify or delete anything on your site or database, and we never download real user records.

Question 3

Do you need my code or passwords?

Accepted Answer

No. A scan needs only your URL. You never share your source code or production passwords.

Question 4

Can I scan someone else's website?

Accepted Answer

No. You may only scan sites you own or are authorized to test. Supabase/Firebase deep checks run on any plan, including Free, once you verify the site by DNS record, file or meta tag.

Question 5

Do you store my data?

Accepted Answer

Scan findings are stored in our database and deleted when you delete the site or your account. We never store your users' data.

Question 6

Which tools do you support?

Accepted Answer

Apps built with Lovable, Bolt, Replit, Cursor, v0, Claude Code and Windsurf, plus anything on Vercel or Netlify or using Supabase or Firebase.

Question 7

What is the difference between a free scan and the deep checks?

Accepted Answer

A free scan checks what any visitor's browser can already see: exposed files, leaked keys, headers and TLS. Deep checks look at your Supabase or Firebase project directly. Verify the site on any plan, including Free, and we'll tell you which tables or collections anyone can read. The Builder plan and up adds the exact fix and daily re-checks.

Question 8

Do you check SEO, AEO and GEO too?

Accepted Answer

Yes, on every plan. Each scan gives three scores next to your security score. SEO covers what Google and Bing need: robots.txt, noindex, canonical URL, sitemap, titles, descriptions, broken pages and link previews. AEO (answer engine optimisation) covers what featured snippets and voice answers draw on: structured data, subheadings and questions answered on the page. GEO (generative engine optimisation) covers what AI assistants such as ChatGPT, Perplexity and Claude need: whether robots.txt lets their crawlers in, whether your pages have content before JavaScript runs, and whether your structured data says who runs the site. Each issue comes with a fix, written for your stack when we can tell it is Lovable, Vite or Next.js. The dashboard also has free SEO tools, such as a search result preview and a schema markup generator.

Question 9

How much will it cost?

Accepted Answer

The Free plan covers one site and four scans a month, at no cost. Paid plans start at $9 a month, or ₹499 a month in India. Prices are shown for the country you visit from.

Question 10

Can I use it today?

Accepted Answer

Yes. Sign in with Google or email, add your site and run your first scan on the Free plan.

Questions, answered.