About VibeDoctor
VibeDoctor reviews apps produced with AI coding tools and returns one ranked report in under two minutes. More than 140 automated checks across 21 diagnostic areas cover secrets and credentials committed to source, auth and access problems such as unprotected routes and missing rate limits, dependencies including hallucinated imports and known CVEs, duplicated logic and dead files, performance, and SEO and general web practices including whether AI search engines can read pages. Each finding links to a file and line and offers an AI fix prompt.
You scan by pasting one line into your agent, which installs an MCP server, with read-only access to code and a promise that it is never used to train AI. Related products include Vibe X-Ray, a visual code explorer, Vibe Story, which explains the app in plain English, and Vibe Monitoring for uptime, SSL alerts and Lighthouse scores. It works with Claude Code, Codex, Cursor, Windsurf and Cline.
A free scan needs no credit card. Product pages cover Vibe Check, X-Ray, Story and Monitoring, and the site has a blog and pricing page.
Key features
- 140+ checks across 21 areas
- Secrets and credential detection
- Auth and access gap checks
- Hallucinated dependency detection
- AI fix prompts per finding
- MCP server for agents
- Uptime and SSL monitoring
Good fit for
- Reviewing code written by an AI agent
- Monitoring a deployed app for uptime and performance
VibeDoctor: questions and answers
- What is VibeDoctor used for?
- VibeDoctor is a scanner and monitor for AI-built apps that runs 140+ checks on a GitHub repo and deployed site for secrets, auth gaps, bad dependencies, performance and SEO. It is a good fit for reviewing code written by an AI agent, and monitoring a deployed app for uptime and performance.
- Is VibeDoctor free?
- Yes. VibeDoctor has a free plan, and paid plans start at $15 per month.
- Is VibeDoctor open source?
- No. VibeDoctor is proprietary (closed-source) software and can't be self-hosted. In the Security category, open-source options include osquery, Gitleaks and TruffleHog.
- What are some alternatives to VibeDoctor?
- VibeDoctor competes with Snyk, Aikido Security and GitGuardian.
Open-source alternatives to VibeDoctor
See all
osquery
Security
SQL powered operating system instrumentation, monitoring, and analytics.
OSSvs Taniumβ 24k
Gitleaks
Security
Find secrets with Gitleaks π
MITvs GitGuardianβ 30k
TruffleHog
Security
Find, verify, and analyze leaked credentials
AGPL-3.0vs GitGuardianβ 28k
Semgrep
Security
Lightweight static analysis for many languages. Find bug variants with patterns that look
LGPL-2.1vs Snykβ 17k
Grype
Security
A vulnerability scanner for container images and filesystems
Apache-2.0vs Snykβ 13k
Kubescape
Security
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, an
Apache-2.0vs Wizβ 12k
SaaS alternatives to VibeDoctor
See all
Snyk
Security
Developer security platform that scans code, dependencies, containers and IaC
SaaS
Aikido Security
Security
All-in-one application security platform for code, cloud and runtime scanning
SaaS
GitGuardian
Security
Detects leaked secrets and credentials in code repositories and developer tools
SaaS
DeepSource
Developer Tools
Static analysis and code health platform with auto-fix suggestions
SaaS
Codacy
Developer Tools
Automated code quality and security analysis for pull requests
SaaS
SonarQube Cloud
Developer Tools
Hosted code quality and security analysis for pull requests, from Sonar
SaaS
