Dev tools · alternatives · 2026
24 alternatives to Code Police
Simple vulnerability detector for your github repo
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1

- 2

- 3

Track GitHub trending repositories in your favorite programming language by native GitHub notifications! - vitalets/github-trending-repos
2018 · github.com · its alternatives →
- 4
Code Finder▲255The ultimate search engine for GitHub repositories
2024 · codefinder.dev · its alternatives →
- 5

- 6

- 7
VibeShift MCP▲141Hi HN, We are the devs behind VibeShift. We have been building this MCP server to put AI coding assistants in an automatic feedback loop. They code, test, debug, fix everything until we have a fully working, secure code. It tests like a real user, copies network/console and logical errors to give them back to cursor. (1 min demo - https://www.youtube.com/watch?v=bN_RgQGa8B0) We felt this was the natural next step for AI coding assistants. And with new asynchronous assistants like codex, having a plug & play tester makes sure you don't have to spend time debugging and…
2025 · github.com · its alternatives →
- 8
- 9GM
2017 · gitmonkey.io · its alternatives →
- 10
BeeSecure▲58The security checkup for indie hackers & vibe coders
2025 · beesecure.io · its alternatives →
- 11

Audit your AI-generated app for security flaws before launch
Sep 2026 · vibecodedetector.com · its alternatives →
- 12

- 13

:cop: GitHub Bot For Validating Pull Request Mergability Requirements and Issues Structure - Schachte/Git-Enforcer
2018 · github.com · its alternatives →
- 14

- 15PS
Hey HN, it's Farrukh and Umar. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats. Why we built this: As friends and collaborators for over a decade, we've been working on various startup ideas in dev tools and infrastructure. In 2017, while building an ML ops toolkit on Kubernetes, we got hacked. During a pilot with a fintech customer, our cluster became victim to a crypto-jacking attack. As it turned out, a dependency in our container base image contained malware (a Monero miner) which triggered inside…
2024 · its alternatives →
- 16

I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 17

GitHub's security alerts for vulnerable dependencies
2017 · github.blog · its alternatives →
- 18
VibeScan▲9Beta tool that runs OWASP/Nuclei/ZAP checks fast and prioritizes fixes; would love test runs on your staging domains and blunt feedback.
2025 · vibescan.co.kr · its alternatives →
- 19

Repository due diligence for the AI era
Jun 2026 · vibescore.adsalihac.me · its alternatives →
- 20GD
All— Lazy Sundays are for fun vibe coding, and this particular weekend, I decided to play around with the GitHub API. Ended up building this little app: GitHub Detective. It fetches the latest activity of a user, but in a nice way—you can filter by categories like PRs, issues, comments, etc., and easily navigate to them. You can also generate a sarcastic analysis of the user based on their activity, then download and share it with friends. :)
2025 · githubdetective.vercel.app · its alternatives →
- 21

I built a CLI that detects patterns AI coding tools leave behind: empty catch blocks, hardcoded secrets, as any everywhere, comments that restate the code, god functions, SQL concatenation. 24 rules across JS/TS and Python. Zero config, runs offline, regex-based so it's fast. npx @yuvrajangadsingh/vibecheck . Also ships as a GitHub Action for inline PR annotations and standalone binaries (no Node required). Why: CodeRabbit found AI-generated PRs have 1.7x more issues than human PRs. Veracode says 45% of AI code samples have security vulnerabilities. "Vibe coding" is everywhere now…
Mar 2026 · github.com · its alternatives →
- 22

A security scanner for Github Actions that doesn't $uck
Mar 2026 · its alternatives →
- 23IB
2024 · securelog.com · its alternatives →
- 24

Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →