vibe-eval.com valid
VibeEval
VibeEval is an automated security testing platform for AI-generated web applications. It deploys autonomous AI agents that probe your running app for exposed keys, missing Supabase RLS, and auth gaps - built for code from tools like Lovable, Cursor, Bolt, v0, Replit, and Claude Code. Pricing starts at $25/month with a 14-day free trial.
Their llms.txt
The beginning of the file, from our validated copy saved 2026-10-25T15:06:24.284Z. Cached copy · Source on vibe-eval.com
# VibeEval
> VibeEval is an automated security testing platform for AI-generated web applications. It deploys autonomous AI agents that probe your running app for exposed keys, missing Supabase RLS, and auth gaps - built for code from tools like Lovable, Cursor, Bolt, v0, Replit, and Claude Code. Pricing starts at $25/month with a 14-day free trial.
> Try free: https://app.vibe-eval.com/signup
## Quick Start
1. Go to https://app.vibe-eval.com/signup (14-day free trial, no credit card)
2. Paste your app URL
3. First triage in under 60 seconds; full deep-scan in 3-8 minutes
VibeEval answers the question: "Is my AI-generated app actually secure?" It performs browser-based DAST (Dynamic Application Security Testing) with 310+ real attack probes covering OWASP API Top 10, BOLA/IDOR, JWT attacks, GraphQL security, race conditions, prompt injection, and secrets detection across 30+ services. Every finding is replayed in a sandbox and verified by a security engineer before it reaches your inbox.
## Core Pages
- [Homepage](https://vibe-eval.com/): Product overview, pricing, and demo
- [Pricing](https://vibe-eval.com/#pricing): Pro $25/month, Team $75/month, Lifetime $249 one-time
- [Pentest Engagements](https://vibe-eval.com/pentest/): Scoped human pentests with a signed report, from $2,900
- [Alternatives Comparison](https://vibe-eval.com/alternatives): How VibeEval compares to Snyk, Veracode, Burp Suite, OWASP ZAP, and others
## Free Tools
- [Token Leak Checker](https://vibe-eval.com/token-leak-checker): Scan for exposed API keys and credentials
- [Package Hallucination Scanner](https://vibe-eval.com/package-hallucination-scanner): Detect AI-hallucinated npm packages
- [Security Flaws Database](https://vibe-eval.com/common-security-flaws): Common vulnerabilities in AI-generated code
- [GEO Calculator](https://vibe-eval.com/geo-calculator): Generative Engine Optimization metrics calculator
## Security Guides by Platform
- [Lovable Security Guide](https://vibe-eval.com/guides/lovable): How to secure Lovable apps
- [Cursor Security Guide](https://vibe-eval.com/guides/cursor): How to secure Cursor-built apps
- [Bolt Security Guide](https://vibe-eval.com/guides/bolt): How to secure Bolt.new apps
- [v0 Security Guide](https://vibe-eval.com/guides/v0): How to secure v0-built apps
- [Replit Security Guide](https://vibe-eval.com/guides/replit): How to secure Replit apps
- [Claude Code Security Guide](https://vibe-eval.com/guides/claude-code): How to secure Claude Code projects
- [Windsurf Security Guide](https://vibe-eval.com/guides/windsurf): How to secure Windsurf-built apps
- [GitHub Copilot Security Guide](https://vibe-eval.com/guides/github-copilot): How to secure Copilot-assisted code
- [Devin Security Guide](https://vibe-eval.com/guides/devin): How to secure Devin-built apps
## Platform Safety Reviews
- [Is Lovable Safe?](https://vibe-eval.com/safety/lovable): Independent safety assessment of Lovable
- [Is Cursor Safe?](https://vibe-eval.com/s
…
Related sites
Similar publisher descriptions and documentation. Similarity does not imply affiliation or equivalent capabilities.
| Domain | Title | Category | Country | Authority | llms.txt | llms-full.txt | Save |
|---|---|---|---|---|---|---|---|
| vibe0.com.au | VibeZero | documentation AI and machine learning Productivity +1 | AU | 45 | ✓ | ✓ | |
| qodex.ai | Qodex.ai | documentation AI and machine learning Developer tools +1 | US | 54 | ✓ | ||
| hacktron.ai | Hacktron AI | documentation Cybersecurity AI and machine learning +1 | — | 60 | ✓ | ✓ | |
| fyeo.io | FYEO — Security Scanner and Expert Security Audits | interface Cybersecurity AI agents and MCP | PL | 45 | ✓ | ✓ | |
| stackhawk.com | StackHawk, Inc\. | documentation Cybersecurity AI agents and MCP | US | 57 | ✓ | ||
| apisec.ai | apisec | documentation Cybersecurity | US | 52 | ✓ | ||
| kualitee.com | Kualitee | transactional Developer tools AI and machine learning +1 | US | 52 | ✓ | ||
| replay.io | Replay | documentation Developer tools AI agents and MCP +1 | US | 52 | ✓ | ✓ |
Machine-readable: GET /v1/resolve?q=vibe-eval.com · GET /v1/domain/vibe-eval.com · this page as Accept: application/json or text/markdown · MCP lookup_domain
Automatically discovered from public files. Inclusion does not imply endorsement or publisher participation.
Own or manage this website?
If you own or manage vibe-eval.com, you can update its listing and review file health, discovery activity and score history.
Manage this listing — optional
What verification unlocks
See how your site is discovered—and control what agents see.
- See your website in the map
Review your indexed topics, nearby publishers sharing headings, measured listing exposure and map snapshots in a private report for your website.
- Control what agents see
Edit your listing description, tags, public contact details and additional llms.txt paths. Publish your terms for automated access, attribution and pricing.
- Make your profile eligible for search
A valid, listed, unblocked, verified profile can appear in our publisher sitemap and become eligible for search-engine visibility. Search engines decide what to index and rank.
- Appear in our llms-full.txt
Eligible verified publishers are listed by name, with their file links and summaries, in the service overview agents can read.
Free. No account registration, backlink or payment required. Public discovery remains available without verification.
Let your coding agent verify it
If your coding agent is authorized to manage this website, paste these instructions into it.
Claim my listing on Agent Web Map for vibe-eval.com:
1. POST https://agentwebmap.com/v1/sites/vibe-eval.com/claims and keep claim_id and claim_secret private.
2. Publish the verification line "AgentWebMap verification: <token>" (token from step 1) in https://vibe-eval.com/llms.txt, or use the DNS, meta-tag or well-known method the response describes. This only verifies the listing; your website and domain remain yours.
3. POST https://agentwebmap.com/v1/sites/vibe-eval.com/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/vibe-eval.com).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verifyCorrections or removal requests: contact the directory.