VibeDoctor is a free app health scanner built specifically for apps made with AI coding tools like Bolt, Lovable, Cursor, v0, and Replit.
AI-generated code ships fast - but it also leaks secrets, hallucinates imports, skips auth, and breaks under load. Generic scanners like SonarQube and Snyk weren't built to catch these patterns. VibeDoctor was.
Connect your GitHub repo, and VibeDoctor runs a full scan across 15 areas using enterprise-grade tools (SonarQube, Gitleaks, Trivy, Lighthouse, ESLint). You get a scored report with severity levels, exact file paths, and fix recommendations - in minutes.
What it catches:
- Leaked secrets and API keys committed to your repo
- Hallucinated imports and phantom npm packages
- Unauthenticated API routes
- SQL injection and XSS vulnerabilities
- N+1 database query loops
- Dependency CVEs
- Page speed and Core Web Vitals issues
- And 8 more categories
Free to scan. No credit card needed. Paid plans add push scans on every commit, PR code review, MCP integration for VS Code/Cursor, and uptime monitoring.
Your app was built by AI. At least have a doctor check it.
