About VibeSitter
VibeSitter is a security babysitter for people shipping apps with AI tools. It looks for the mistakes that are easy to make when you move fast: exposed keys, missing database policies, unsafe auth settings, and headers that leave the browser open to abuse.
The product is deliberately narrow. VibeSitter checks public metadata and configuration. It does not run penetration tests, send payloads, scan customer data, or claim compliance certifications.
Connected scans use read-only Supabase OAuth scopes. We never ask for a service-role key, database password, or a copy of your source code.
Every finding ships in two fix formats: a plain-English explanation with SQL/config, and a copy-paste prompt for the AI tool that built your app.