One command scans any web app for broken flows, security holes, and auth gaps. No config. No signup. Just results.
npx vibe-gate https://your-app.com
Works with Vercel · Netlify · Railway · any deployed URL
No setup. No learning curve. Point it at your app, get actionable findings in seconds.
npx vibe-gate https://your-app.com — Playwright launches and scans your live app automatically.
Color-coded A–F grade across 5 categories. Each check shows pass/warn/fail with specific, named findings.
Plain-English recommendations tell you exactly what to fix. No jargon, no vague warnings, no false positives.
Every scan gives you a complete picture of your app's health — from load time to auth gaps.
Load success, HTTP status, render time, and title detection.
JS errors, 404s, and API failures caught from the browser console.
CSP, HSTS, X-Frame-Options — checks 6 critical security headers.
Scans for exposed API keys, tokens, and credentials in your app's source. Catches the kind of leaks that get devs fired.
Detects unprotected routes, missing login pages, and auth gaps before your users — or attackers — do.
Run vibe-gate scan . to check your local project for issues before you deploy. Catch problems at the source.
Cloud dashboard for teams coming soon. The scanner will always be open-source and free.
npx vibe-gatenpx vibe-gate runs directly from npm. It downloads Playwright on first run (one-time ~30MB), then works offline. You can also install globally with npm install -g vibe-gate.vibe-gate http://localhost:3000. The scan . command checks your local filesystem directly.--threshold B). Use it in GitHub Actions to gate PRs from AI-generated code. A vibe-gate scan GitHub Action workflow is included in the repo.No signup. No commitment. One command.