Live now. Sign up free, paste your app’s address, and this works from your dashboard. What is live today lists what is still to come.
A finding is a problem a scan found in your app. Each one comes with a plain-language explanation of what is wrong and why it matters to your users, a severity, a deadline, a confidence tag (Confirmed or Likely), where it was found, and a fix.
Ranked and merged
- Ranked, so the top five are the ones worth your time first.
- Duplicates merged: one problem, one finding, even when several signals saw it.
- A vulnerable package is its own finding, with the installed version, the fixed version, the advisory id and the advisory’s own severity.
Two ways to fix
- Code prompt
- A prompt you paste into your coding tool or app builder. Written for the tool doing the work, so you do not have to translate security jargon first.
- Click-path
- Numbered steps for when the fix lives in a hosted dashboard rather than in your code.
VibeLock never writes to your code. It explains and writes prompts. Your coding tool makes the change, and you stay in control of it.
Fixed means confirmed by a rescan
Nothing is marked fixed because someone said so. Apply the fix, click Verify fix, and VibeLock rescans that check. A finding is fixed only when the rescan confirms it. How a finding is opened and closed has the detail.
Notifications
VibeLock tells you when something changes, and only then: a new finding, a severity change, a deadline coming up or missed, a badge state change, or a lost connection or ownership proof.