A non-coder built AppVitals to scan vibe-coded apps for exposed keys

Texas Twins Dad @Texas_Twins_DadOriginally posted 2026.10.16

Open original on X

I build apps with Grok Bot and Cursor. And I kept wondering how I can make sure they're actually safe to put online. I can't read the code. So I built a small tool to keep testing my own apps. It checks the public side of a site for exposed keys, missing security headers, and API leaks. Then I thought other vibe coders might need the same thing, so I put it online. It's called AppVitals. First scan is free :) http://appvitals.app