# VibeCheck.expert

> Code quality and security checking for vibe coders.

VibeCheck is an automated code scanning tool that analyzes code for security vulnerabilities and quality issues. Users paste code snippets (or upload files) and receive a Vibe Score (0–100) across Security, Quality, and Testing categories. The analysis combines static pattern matching, structural analysis, and AI-powered review.

## How it works

1. Paste a code snippet, upload a file, or connect a GitHub URL.
2. VibeCheck runs security and quality analysis instantly.
3. Get a Vibe Score with specific issues, severity ratings, and suggested fixes.
4. Use the fixes directly or hire a human reviewer for deeper analysis.

Supported languages: JavaScript, TypeScript, Python, PHP, Go, Ruby, Rust, Java, Swift, C#, and more.

## Vibe Score tiers

- Dead Vibe (0–40): Critical security or quality issues. Do not ship.
- Off Vibe (41–65): Meaningful issues that should be addressed before production.
- Good Vibe (66–85): Solid code. No critical issues, maybe a few things to fix.
- Immaculate (86–100): Exceptional code ready for production.

## Scoring methodology

- Security (55% weight): SQL injection, hardcoded secrets, XSS, missing authentication, insecure configurations, eval() usage, path traversal, weak cryptography.
- Quality (45% weight): Code structure, error handling, nesting depth, cyclomatic complexity, function length, duplicate code, import hygiene.
- Testing: Available on full repo scans (coming soon).

Critical issues apply hard score caps: a single critical security vulnerability caps the overall score at 35 regardless of quality. Each category starts at 100 and takes deductions based on issue severity (critical, high, medium, low).

## Main pages

- Homepage: https://vibecheck.expert
- Pricing: https://vibecheck.expert/pricing
- About: https://vibecheck.expert/about
- Blog: https://vibecheck.expert/blog
- Contact: https://vibecheck.expert/contact
- Certified: https://vibecheck.expert/certified
- Security practices: https://vibecheck.expert/security
- Privacy policy: https://vibecheck.expert/privacy
- Terms of service: https://vibecheck.expert/terms

## Pricing

### Automated plans

- Quick Check (Free): Paste code, get a score. Top 3 issues shown with fix suggestions. No account required. No code stored.
- Self Check ($19/mo): Unlimited scans, full issue list, fix suggestions, scan history, file and URL scanning, report download, email support.
- Deep Check ($49/mo): Everything in Self Check plus zip project upload, GitHub PR checks (coming soon), README badge, AI-assisted analysis, priority support.

### Human review plans

- Basic Human Check ($499): 72-hour initial response, scope assessment, single module review, written report with fix recommendations.
- Full Project Audit ($999): 72-hour response, full repo scope, written report with fix recommendations and code samples, timeline confirmed after scope review.
- Pre-Launch Certification ($1,999): Estimated 5–10 business days, full repo review, written report, fix recommendations and code samples, VibeCheck Certified badge, PDF certificate, directory listing, 30-day follow-up support.
- Retainer ($799/mo): Monthly audits, dedicated reviewer, scope defined per cycle, badge, certificate, and directory listing included.

## VibeCheck Certified

A trust signal for vibe-coded applications. A senior developer (5+ years experience) audits the full codebase and provides a written report. Certified apps receive an embeddable SVG badge, a PDF certificate, and a listing in the public VibeCheck Certified directory. Certifications are valid for 6 months and renewable at 50% of the original price.

## Blog posts

- Why Vibe Code Has 2.74x More Vulnerabilities: https://vibecheck.expert/blog/vibe-code-vulnerabilities
  AI-generated code contains 2.74x more security vulnerabilities than human-written code (Stanford/GitClear research). Common issues: SQL injection, hardcoded secrets, missing auth, XSS, insecure dependencies.

- What Your Vibe Score Actually Means: https://vibecheck.expert/blog/what-vibe-score-means
  Detailed explanation of the 0–100 scoring system, the four tiers (Dead Vibe, Off Vibe, Good Vibe, Immaculate), how category weights work, and what to do with your score.

- Top 5 Security Mistakes in AI-Generated Code: https://vibecheck.expert/blog/top-5-security-mistakes
  The five most common vulnerabilities found in vibe-coded apps: SQL injection (40% of DB code), hardcoded secrets (35% of API code), missing auth (30% of API endpoints), XSS (25% of web apps), no input validation (45% of user-input code).

- Announcing VibeCheck Certified: https://vibecheck.expert/blog/announcing-vibecheck-certified
  Introduction of the Certified program: human code audits, trust badges, PDF certificates, and the public certified directory.

## About

VibeCheck was built for people shipping vibe code — software built with AI coding tools like Cursor, Claude Code, Bolt, Lovable, v0, and ChatGPT. Founded by David Morgan (20+ years in digital products) and Travis Totz (designer/product builder), part of the Swell Apps ecosystem.

Philosophy: Not gatekeeping. Vibe coding is powerful and real. VibeCheck is the safety net — like a friend who catches the risks before you ship.

## Security practices

- Code is never stored (free tier): processed in memory, discarded after analysis.
- All data encrypted in transit (HTTPS/TLS).
- Submitted code is not used to train AI models.
- Minimal data collection: only scores, issue metadata, and anonymous usage data.
- Hosted on Vercel Edge infrastructure with auto-scaling and DDoS protection.
- API keys and credentials stored in encrypted environment variables.
- Responsible disclosure program: security@vibecheck.expert, 24-hour acknowledgment, 72-hour assessment.

## Privacy

- Free tier: no code retention, no account required.
- Paid tiers: scan results stored while account is active, source code not retained.
- No selling of personal information. No training on submitted code.
- Third parties: Stripe (payments), Vercel (hosting), OpenAI (AI analysis only).
- Users can access, export, or delete their data at any time.

## Contact

- Email: hello@vibecheck.expert
- Website: https://vibecheck.expert/contact