Your code has secrets.
We sniff them out.
Paste a GitHub repo. Get a vibe score. Find the bugs, leaked keys, and sketchy code your AI assistant forgot to mention.
Free first scan. $4.99 for unlimited, forever.
How it works
Three steps. Zero BS.
Drop Your Repo Link
Paste any public GitHub URL. Sign in to scan private repos too.
We Scan Everything
35+ rules check for secrets, injections, bad deps, code smells, and more.
Get Your Vibe Score
A-F grade with plain-English explanations. No jargon, just the truth.
Detection
What VibeSniffer catches
35+ scanning rules that catch the stuff your AI coding assistant missed.
Hardcoded Secrets
API keys, passwords, and tokens hiding in plain sight
SQL Injection
Vulnerable database queries waiting to be exploited
XSS Vulnerabilities
Cross-site scripting holes in your frontend
eval() & Code Injection
Dynamic code execution that opens backdoors
Sketchy Dependencies
Outdated or vulnerable third-party packages
Code Smells
Structural issues that make maintenance painful
Bloated Files
Oversized files that slow your build down
Performance Issues
Slow patterns and unnecessary complexity
Best Practices
Industry-standard rules your code should follow
Sample Output
See what a scan finds
Real findings from a real scan. No fluff, no filler — just the stuff that matters.
Scan Report
user/my-cool-app
.env file with database credentials committed to repo
Hardcoded API key found in src/config.ts line 23
Unsanitized user input in SQL query — injection risk
3 dependencies have known vulnerabilities (npm audit)
$4.99
One payment, forever access
35+
Scanning rules and growing
0
Subscriptions. Ever.
Pricing
Simple pricing. No tricks.
Try free. Pay once if you like it. No subscriptions, no enterprise tiers.
VibeSniffer
$4.99 / once
- Unlimited scans forever
- Private & public repos
- Detailed vibe scores (A-F)
- All 35+ scanning rules
- Community-driven development