| What it does | Don't just vibe it — wrench it!
| Free, open-source plugin that swaps secrets and personal data for placeholders before AI models see them
|
|---|
| Stage | Startup
| Not given
|
|---|
| Founded | 2026
| Not given
|
|---|
| Based in | FI
| DE
|
|---|
| Pricing model | Not given
| Open source
|
|---|
| Pricing | Free: $0/month with 3 scans per month, all 18 tools, full reports, and 30-day history. Starter: $9/month with 30 scans per month, all 18 tools, full reports, markdown export, and 60-day history. Pro: $19/month with unlimited scans, all 18 tools, full reports, markdown export, 90-day history, and API
| Not given
|
|---|
| Key features | - Security Scan: Check for vulnerabilities, exposed secrets, and misconfigurations
- Speed Check: Lighthouse analysis with plain-English explanations
- SEO Scan: Find missing meta tags, broken OG images, and sitemap issues
- Mobile Check: Screenshots at 5 screen sizes
- Accessibility Check: WCAG 2.1 analysis for alt tags, form labels, heading hierarchy, and ARIA landmarks
- Dependency Audit: Scan npm/pip packages against real CVE databases
- Prompt Injection Scanner: Analyze system prompts against 10 attack categories
- Cost Forecast: Estimate hosting costs at 100, 1K, and 10K users
- Legal Docs: Generate privacy policy and terms of service with GDPR-ready templates
- Deploy Guide: Step-by-step instructions for Vercel, Netlify, Railway, and more
| - Detects email addresses, phone numbers, API tokens, private keys, and passwords
- Replaces secrets with placeholders before reaching the model
- Runs entirely on your local machine with no telemetry or servers
- Protects PDFs, images, and SSH keys
- Uses fixed detection rules instead of language models
- Supports custom detection rules
- Highest precision detection on benchmark datasets
- Optional NER service for finding names in text
|
|---|
| What makes it different | - 18 specialized checks in one scan covering security, SEO, speed, accessibility, and production readiness
- Built specifically for AI-generated code from Lovable, Bolt.new, Cursor, and v0
- Real vulnerability scanning with no hallucinated results based on research of 100 live projects
- Free tier with 3 scans per month requiring no signup or credit card
| - Highest precision with lowest false positive rate across all tested datasets
- Preserves code readability by not masking commit hashes, IDs, and file names
- No external dependencies or telemetry required
- Fully open source under Apache 2.0 license
|
|---|
| Free plan | Not given
| Not given
|
|---|
| Open source | Not given
| Not given
|
|---|
| Platforms | Not given
| Not given
|
|---|
| Public API | Not given
| Not given
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 8 ▲ +1 (up) since last check | 2 ● no change since last check |
|---|
| Trust Flow (Majestic) | 3 | 1 |
|---|
| Citation Flow (Majestic) | 10 | 27 |
|---|
| Referring domains (Majestic) | 17 | 17 |
|---|
VibeWrench
maisecrets