This page is the single list of what you can use today and what is still to come. Every other page in these docs carries a note saying which side of the line it is on.
Available today
- Free sign-up
- Sign up with your email or an account you already have at a supported provider. No card.
- The outside look
- Paste your app’s address on the home page. In about a minute you see what anyone on the internet can see, with the first finding and its fix in full. Sign up free to see the rest.
- The dashboard
- Your outside-look results, labelled as such, and the steps to the full check.
- Ownership proof and the full scan
- Prove the app is yours from the dashboard, then run the full check.
- The VibeLock MCP server
- The inside check in your coding tool.
- Findings
- Every finding with its severity and confidence, and the fix for each outside look finding. Fix prompts for the full scan, deadlines and rescans come with the Founder plan.
- The free checklist
- The Vibe Coding Security Checklist, a free PDF you run by hand. It uses the same checks, severities and deadlines VibeLock uses.
- The Vibe Coding Security OS
- A Notion workspace with the exact fix for every check, a findings tracker, an evidence log, policies and an incident runbook. A one-time purchase.
Not live yet
- Buying the Founder plan. Billing is off, so nobody can be charged yet.
- Fix prompts for the full scan, deadlines and rescans, which come with the Founder plan.
- The VibeLock Verified badge, the public trust page and detailed links for buyers, which come with the Founder plan.
- A weekly Live URL rescan on the Founder plan.
- Policies generated from your evidence.
- Proving ownership by signing in with your hosting provider.
- Repository read, VibeLock reading your repository itself, which is switched on only when every safeguard described on the Repository read page is in place.
Paid plans are not open yet, so nothing is charged.
Later
- The Team plan, shown on pricing as coming later and not sold yet: up to 5 apps, teammates with roles, daily rescans, the questionnaire assistant, reports and PDF export, an API and webhooks, and a trust page on your own domain.
- Enterprise features: single sign-on, SCIM, a full audit log, evidence packs and white-label trust pages, built with the first customer who needs them.
- One-click ownership proof with more hosting providers and domain registrars.