VibeGuard

A real pentest for your AI-built app. From €59.

Developer Tools

Artificial Intelligence

Security

Visit WebsiteSee on Product HuntTwitter ⧉

Hi Product Hunt 👋 I'm Andrea from Italy and I spent years doing security work for companies, on findings nobody ever knew were mine. This is the first thing I've built that has my own name on it, and I'm fairly terrified. Here's why it exists. Over the last years I watched founders ship real production apps, with paying users, card details and other people's personal data, written end to end by Claude Code, Cursor, Codex, Lovable, you name it. Fast, genuinely impressive, and completely unexamined. Not out of carelessness: the options were bad. A coding agent solves the problem you described to it. You described a feature. Nobody described the attacker, so the check that stops them never got written. The feature works perfectly, which is exactly why the hole survives to production. Veracode measured this properly. Across 100+ models and 80 tasks, they picked the insecure implementation 45% of the time when a secure one was available. And what could you do about it? A free scanner reads your headers and your TLS in sixty seconds and tells you nothing about whether a signed-in user can read someone else's data. A real penetration test costs €5,000 and six weeks, which is not a decision a solo founder with forty users gets to make. VibeGuard is the middle. It points an autonomous pentest agent at your live app, the same class of tool I'd have reached for as a consultant, for one to eighteen hours depending on depth. It doesn't read your code. It attacks the running thing from outside, like anyone else would. Give it a throwaway test account and it goes behind the login, which is where the expensive bugs live: authorisation, data isolation, one user quietly reading another user's records. What comes back isn't a CVSS spreadsheet. It's each finding in plain English: what I found, why it matters, what someone could actually, with the request that proves it, and a prompt you paste straight into the agent that wrote the bug. Fix it, click once, and a free re-check re-tests only those findings and gives you a dated before/after. That part matters more than it sounds: whoever wrote the fix is the last person who can certify it, and that includes your agent. €59, €99 or €199. One time. No subscription, no seats, no call with sales. Ask me anything and let me know what you think in the comments. I'd really appreciate it 😄