princepal9120/vibeaudit

VibeAudit is a security scanning tool designed for people who build software quickly, especially those using AI coding assistants. It checks your code repositories and live web applications for security vulnerabilities, then explains what it found in plain English. The goal is to give indie builders, freelancers, and small teams a straightforward way to validate their security before launching or handing a project off to a client. When you submit your code or a live URL, the platform runs it through a set of established security scanners to look for common issues. It checks for exposed secrets like API keys, vulnerable dependencies, and standard web vulnerabilities. After gathering the findings, it sends them to an AI model (GPT-4o) that translates the technical details into everyday language, assigns a severity score to each issue, and suggests step-by-step fixes. You end up with a security score, a professional PDF report, and a shareable link. A solo founder might use this to run a final check before launching a new app, making sure nothing dangerous is lurking in their code. A freelance developer could use it to generate a professional audit report for a client at the end of a project. If you are using AI tools to write your code, this tool acts as a second pair of eyes to validate that the generated software doesn't introduce known security flaws. It offers one free scan, with additional scans costing $30 each on a pay-as-you-go basis. The project is built as two connected pieces: a frontend interface for managing scans and viewing results, and a backend system that queues and processes the actual scans. It relies on established security tools under the hood and uses AI only for the explanation and fix-generation layer. It is open source, though it does not yet have a full automated test suite for contributors to rely on.