Live now. Sign up free, paste your app’s address, and this works from your dashboard. What is live today lists what is still to come.
The steps
- 1. Paste your URL
- On the home page, paste the address of an app you own or have permission to test. No account needed.
- 2. The outside look
- In about a minute, a passive look at what your app shows anyone on the internet. The first finding and its fix are shown in full. Findings are tagged Confirmed or Likely. There is no number and no letter grade. Your stack is worked out from the app itself, not from a form.
- 3. Sign up free
- Sign up to see every finding. Your results are kept and you go straight to your dashboard.
- 4. Prove it is yours
- From the dashboard, prove the app is yours to run the full check, and connect the VibeLock MCP server in your coding tool for the inside check.
- 5. Fix, rescan, publish
- Paste the fix prompt into your coding tool and rescan to confirm. Once all five criteria hold, publish your trust page. Rescans, the badge and the trust page come with the Founder plan, which cannot be bought yet.
Until you prove the app is yours, the dashboard holds only the outside look: what any visitor can see, labelled as such, never a guess.
Where things live in the app
- Overview
- The facts at a glance: badge state, criteria, open findings, coverage, connections.
- Findings
- Every open finding, most urgent first, with its severity, deadline, confidence and fix.
- Controls
- Every check that applies to your app, its state, and how it was checked.
- Scans
- The history of scans and what each one found.
- Connections
- Ownership proof, the coding tool and the repository host, with their health.
- Trust page
- What your public page shows, and the switch that publishes it.
- Policies
- Documents generated from your evidence, and blocked if they contradict it.
Signing in
You sign in with a magic link sent to your email, or with an account you already have at a supported provider. Single sign-on and SCIM are part of the Enterprise plan.