Draft:VibeCoden't
| VibeCoden't | |
|---|---|
| Developer | VibeCoden't |
| Operating system | Web application |
| Type | Vulnerability scanner, Web application security |
| Website | vibecodent |
VibeCoden't is a web-based vulnerability scanner focused on the security of websites and web applications developed using artificial intelligence-assisted programming tools. The service analyzes deployed websites and source code for potential security vulnerabilities and provides reports and remediation guidance intended for AI-assisted development workflows.[1]
The platform is primarily aimed at software created through vibe coding, a software-development approach involving extensive use of generative artificial intelligence to generate and modify source code.[1] VibeCoden't combines automated web security analysis with remediation instructions designed to be passed back to AI coding assistants.[1]
History
[edit]VibeCoden't was founded by George Manganas, with Athanasios (Thanos) Dovas as co-founder.[2][3]
The project was developed in the context of the increasing use of generative-AI tools for building websites and web applications. It focuses particularly on security testing for applications created through AI-assisted development workflows.[1]
The service was developed around combining automated web-application security testing with a workflow designed for developers who use generative AI to write and modify application code.[1]
Rather than limiting the process to identifying potential vulnerabilities, VibeCoden't was designed to generate remediation instructions that can subsequently be supplied to AI coding assistants. This allows developers to use AI-assisted tools during both application development and remediation of identified security issues.[1]
The platform subsequently incorporated functionality for analyzing both publicly deployed websites and source code supplied directly for analysis.[1]
Founders
[edit]VibeCoden't was founded by George Manganas and co-founded by Athanasios Dovas.[2][3]
Manganas is publicly associated with VibeCoden't through his professional profile on LinkedIn.[2] Dovas is likewise publicly associated with the project through his professional presence on LinkedIn.[3]
The founders developed the service around the application of automated security testing to AI-assisted software-development workflows.[1]
Service
[edit]VibeCoden't provides automated security analysis for websites and web applications. Users can submit the address of a publicly accessible website for analysis or provide source code for testing.[1]
The scanner examines applications for categories of potential security issues including exposed credentials, authentication and authorization problems, insecure configuration, missing security headers, exposed development resources and patterns associated with common web-application vulnerabilities.[1]
Results are presented in a security report containing individual findings and their associated severity. The service also provides an overall security score intended to summarize the results of a scan.[1]
Website scanning
[edit]The website scanner analyzes publicly accessible web applications using automated requests. It examines application responses, publicly accessible resources and security-related configuration for indications of potential vulnerabilities.[1]
Types of findings examined by the service include:
- exposed API keys, credentials and access tokens;
- authentication and authorization weaknesses;
- insecure session and cookie configuration;
- missing or incorrectly configured HTTP security headers;
- exposed configuration and development files;
- publicly accessible source maps;
- database access-control problems;
- patterns associated with cross-site scripting (XSS);
- patterns associated with SQL injection; and
- other web-application security misconfigurations.[1]
The service describes its website scanning as non-destructive and states that scans are designed to identify potential weaknesses without deliberately exploiting them.[4]
Source-code scanning
[edit]VibeCoden't also provides source-code analysis intended to identify potential vulnerabilities before an application is publicly deployed.[1]
Source-code scanning is oriented towards applications developed using generative-AI programming systems, where portions of an application's code may have been generated or modified by an AI coding assistant.[1]
The analysis examines supplied code for patterns associated with insecure implementation and configuration.[1]
Security reports
[edit]Following analysis, VibeCoden't produces a report containing security findings identified during the scan.[1]
Individual findings are classified according to severity and include descriptions of the issue, available technical evidence and remediation information.[1]
The service also produces an overall security score. According to VibeCoden't, the score is intended to provide a summary of detected findings rather than constitute a formal security certification.[1]
AI-assisted remediation
[edit]A component of VibeCoden't's workflow is the generation of remediation instructions intended for use with AI coding assistants.[1]
After identifying a potential vulnerability, the service can generate a prompt describing the security issue, its severity, available evidence and a proposed remediation approach.[1]
The generated instructions can then be supplied to an AI programming system to assist the developer in modifying the affected application.[1]
This approach creates a workflow consisting of AI-assisted development, automated security analysis and AI-assisted remediation.[1]
Security research and educational content
[edit]VibeCoden't publishes articles and technical guides concerning web application security, AI-assisted software development and security issues associated with applications developed using generative AI.[5]
The material is primarily directed towards developers using AI-assisted programming tools and covers security concepts relevant to modern web applications.[5]
Security of AI-generated applications
[edit]A recurring subject of VibeCoden't's published material is the security of applications developed through vibe coding.[5]
The material discusses security considerations associated with relying on generative AI to produce application code, including authentication, configuration, secret management, database permissions and validation of generated code.[5]
The site's guidance advocates security testing of AI-generated applications rather than assuming generated source code is secure by default.[5]
Exposed credentials and API keys
[edit]VibeCoden't publishes educational material concerning the exposure of API keys, credentials and access tokens in web applications.[5]
Credentials intended for server-side use can become publicly accessible when they are incorporated into client-side code delivered to a user's browser. The site's material discusses secret management, environment configuration and separation of client-side and server-side credentials.[5]
Authentication and authorization
[edit]The site's educational material covers authentication and authorization issues in web applications.[5]
Its security guidance discusses the distinction between authentication, which establishes the identity of a user, and authorization, which determines which resources and operations an authenticated user can access.[5]
Related material discusses database access controls and policies designed to prevent users from accessing data belonging to other accounts.[5]
Database security
[edit]VibeCoden't publishes material concerning database permissions and access controls in web applications.[5]
Topics include application-level and database-level restrictions intended to limit unauthorized access to stored information.[5]
The material considers database security in the context of AI-generated web applications, where application functionality and database interactions may be produced using generative-AI development tools.[5]
HTTP security headers
[edit]VibeCoden't's security material discusses HTTP security headers and browser-level security controls.[5]
Topics covered include Content Security Policy (CSP), restrictions on the sources from which browser resources can be loaded and other controls designed to reduce exposure to browser-based attacks.[5]
Cross-site scripting
[edit]The site's educational material covers cross-site scripting (XSS), a category of web vulnerability in which untrusted content can result in script execution in a user's browser.[5]
VibeCoden't's scanning functionality examines applications for patterns that may indicate potential XSS vulnerabilities.[1]
SQL injection
[edit]VibeCoden't's security material also covers SQL injection, an injection vulnerability involving unsafe construction or execution of database queries.[5]
The service includes injection-related patterns among the types of potential issues considered during security analysis.[1]
Secret management
[edit]The educational content discusses management of secrets used by web applications, including API credentials, access tokens and other sensitive configuration values.[5]
The material discusses separation between information that can safely be exposed to client-side applications and credentials that should remain accessible only to trusted server-side components.[5]
Security practices
[edit]VibeCoden't publishes documentation describing security practices used by the service.[4]
According to the company's documentation, website scans are intended to use non-destructive requests rather than deliberately exploiting identified vulnerabilities.[4]
The service states that controls are applied to scanning in order to restrict access to private or internal infrastructure.[4]
VibeCoden't also publishes information concerning its handling of scan data, source code and account information.[4]
The company provides a responsible-disclosure process through which security researchers can report vulnerabilities discovered in the VibeCoden't service itself.[4]
Relationship to vibe coding
[edit]VibeCoden't is positioned around the practice of vibe coding, in which developers use generative-AI systems extensively during software development.[1]
AI coding assistants can be used to generate application components, database queries, authentication logic, API integrations and configuration. VibeCoden't applies automated security testing to applications produced through this type of workflow and provides remediation information intended for use with AI-assisted development processes.[1]
The service's workflow therefore combines AI-assisted software creation, automated vulnerability analysis and AI-assisted remediation.[1]
Business model
[edit]VibeCoden't operates using free and paid security-scanning options.[1]
The service provides different levels of security analysis, with more extensive scanning functionality available through paid options.[1]
See also
[edit]References
[edit]- 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 "VibeCoden't". VibeCoden't. Retrieved 16 September 2026.
- 1 2 3 "George Manganas". LinkedIn. LinkedIn Corporation. Retrieved 16 September 2026.
- 1 2 3 "VibeCoden't". LinkedIn. LinkedIn Corporation. Retrieved 16 September 2026.
- 1 2 3 4 5 6 "Security". VibeCoden't. Retrieved 16 September 2026.
- 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 "VibeCoden't Blog". VibeCoden't. Retrieved 16 September 2026.