Heimdall Scan

What it does

Vibe-coding is amazing for shipping fast, but AI often misses security. Exposed keys and broken access control shouldn't be the price of speed. Heimdall Scan is the auditor built for the vibe-coding era. Connect your GitHub, scan your AI-written code for vulnerabilities, and get instant fix-prompts. Copy the prompts directly to your AI tool to patch every issue in seconds. Move fast without the security risk.

Scan your GitHub repo in seconds. Heimdall finds exposed API keys, broken auth, CORS misconfigurations, and 15+ more security issues — with AI-generated fix prompts.

Connect your GitHub and pick any repo. Heimdall handles the rest. Sign in with GitHub and pick the repo you built. No installs, no config files, no terminal. The whole setup takes about ten seconds. src/app/api/history/get/route.ts · Broken Access Control (IDOR) src/app/api/history/update/route.ts · Broken Access Control (IDOR) src/app/api/history/save/route.ts · Broken Access Control (IDOR) Every problem comes with a plain-English explanation and a ready-to-paste prompt for Cursor, Lovable, or Bolt. Copy, paste, done. You move fast with Cursor, Lovable, Bolt, and v0. Heimdall makes sure nothing dangerous ships with your next deploy. AI tools ship code fast, but they don't audit their own…from heimdallscan.com

• 
  VibeScan2025 · vibescan.io · ▲320

  Ship AI code with confidence.

• 
  VibeSec2025 · vibesec.app · ▲249

  Find and Fix Code Vulnerabilities Instantly!

• 
  SecureMyVibesFeb 2026 · securemyvibes.com · ▲3

  Scan your vibe-coded app before hackers do

• 
  Vibe Code Secure2025 · vibecodesecure.com · ▲15

  Vibe code app security scanner

• 
  Vibe App ScannerDec 2025 · vibeappscanner.com · ▲8

  I'm a security engineer and started playing around with AI coding tools last year. I noticed a lot of basic security issues: exposed api keys, missing input sanitization, no rate limiting etc. So I built this to scan for them automatically.

• 
  VibeScanApr 2026 · vibe-scan.app · ▲2

  Security scanner for AI-built apps — fix prompts in 30s

• 
  Spira Maxima▲578

  Video model that turns script into viral social media videos

  AI · 17d ago · spira.ai

• 
  Rill Browser▲540

  The browser where Claude Code and Codex work beside you

  AI · 16d ago · rill.love

• 
  Germany's new sovereign AI model Kolibri▲424

  Kolibri is Aleph Alpha

  AI · 18d ago · tej.as

• 
  Giving Opus 5.5 a simulated paint canvas▲392

  Paintings by AI models: programs run through a simulation of oil paint.

  AI · 20d ago · stillwet.art

• 
  Onepin▲384

  AI voiceover with every name, price and date said right

  AI · 30d ago · onepin.ai

• 
  PixVerse R2▲381

  A real-time world model you can explore and change

  AI · 28d ago · world.pixverse.video

• 
  Brew ▲900

  Like Claude design for email marketing

  AI · May 2026 · brew.new

• 
  Kilo Code for VS Code▲896

  Parallel agents, diff reviewer, and multi-model comparisons

  Dev tools · May 2026 · kilo.ai

• 
  StoreClaw▲806

  Grow your store profits with agents that know how to sell

  AI · May 2026 · storeclaw.ai

• 
  PollyReach▲795

  Give your agent a real number and voice to make calls.

  AI · May 2026 · pollyreach.ai

• 
  Needle: We Distilled Gemini Tool Calling into a 26M Model▲776

  Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…

  Life & fun · May 2026 · github.com

• 
  Files.md – Open-source alternative to Obsidian▲730

  🌱 Private, quiet space for thinking. Simple app for .md files. - zakirullin/files.md

  Dev tools · May 2026 · github.com