Scanning

Scanning permission and ownership proof

Why VibeLock scans only apps you own or may test, how you prove an app is yours, and how that proof is kept current.

Live now. Sign up free, paste your app’s address, and this works from your dashboard. What is live today lists what is still to come.

Only apps you own or may test

VibeLock never scans a third-party app without the owner’s permission. When you paste a URL you confirm that you own the app or have written permission to test it. Until you prove ownership, VibeLock only looks at what any visitor would see, the passive preview.

Everything deeper than a public visit needs proof that the app is yours. Faking ownership or scanning an app you have no right to test is abuse, and removes the trust page. The acceptable use policy sets this out.

Prove you own your app

Pick any one way. You can add another later, and having two is safer.

A verification file (any host)
VibeLock gives you a prompt for your coding tool or app builder. Your tool adds one small text file at /.well-known/vibelock-verify. Publish, then press Check.
A tag
If your app cannot serve that file, paste one meta tag into the head of your home page. Press Check.
A DNS record
For a domain you control. Add the TXT record VibeLock shows you where you manage DNS. Changes can take up to an hour. Not available on a builder’s shared subdomain, because you do not control its DNS.
Sign in with your hosting provider
Not yet available. When it opens, you pick the project that serves your app, and VibeLock reads only which domains belong to it.

Connecting your code does not prove the app is yours, because anyone can copy code. Only something on your live app or your domain does.

Proof is per address

Proof covers the exact host you verified. A new address needs new proof, and www and no www count as different addresses.

Staying proved

VibeLock re-checks your proof once a day and again before every deeper scan. If the proof is missing twice, at least 24 hours apart, it counts as lost. You are told privately and deeper scans pause. If the proof is not back within 14 days, your public trust page is removed, exactly as if it had been deleted. Your history stays in your account, and proving ownership again restores the page.

Something unclear or out of date? Email hello@vibelock.ai or see the FAQ.