VibeScan scans any public URL for security vulnerabilities common in AI-generated apps - exposed API keys, misconfigured headers, open CORS, missing rate limits, public source maps, and more. Paste a URL, get a scored report in seconds. No signup required for free scans. Built for developers who ship with Cursor, Bolt, Lovable, and Replit.