Trust
The security scanner built for vibe coders
Trust launched on May 2, 2026 with 2 votes, #6,288 of 20,538 launches that month.
What it does
Most AI-generated apps ship with leaked API keys, broken auth, and unsanitized inputs nobody ever reviewed. Trust scans your live URL or GitHub repo in 5 minutes running real DAST + SAST + Gitleaks, then turning findings into Claude-powered fix suggestions you can paste straight into Cursor. We also ship an MCP server, so Trust runs inside Claude Code itself, ask "scan this before I deploy" and it just works. Built because we kept shipping vibe-coded projects without auditing a single one.
Free AI security scanner for indie developers. Find vulnerabilities, secrets exposed to the browser, and open databases across your live app and GitHub repo in 30 seconds - with AI-powered fixes.
Deep analysis of your codebase for security vulnerabilities using AI-powered detection. Catch hardcoded secrets and server keys accidentally shipped to the browser - then see whether they're actually exposed in your live app. AI analyzes root cause, generates fix code, and creates a GitHub PR - all in one click. Integrate Trust into Claude Code or Cursor. Run scans without leaving your IDE. Paste any website URL or GitHub repository. No setup, no CLI, no config files. Nuclei DAST, Semgrep SAST, Gitleaks secrets, and dependency audit - all at once. AI generates fix code with before/after diffs and can open a GitHub PRfrom trust-scan.me
Pricing, as stated on its site
Free tier, paid plans from $9.9/mo — Free tier includes 5 URL scans and 3 GitHub repo scans per month with vulnerability list and 2 free AI analyses. Pro plan at $9.9/month (launch offer, regular $12/month) includes unlimited scans, unli
checked October 2026 · prices change
Does a similar job
all alternatives →
VibeShift MCP2025 · github.com · ▲141Hi HN, We are the devs behind VibeShift. We have been building this MCP server to put AI coding assistants in an automatic feedback loop. They code, test, debug, fix everything until we have a fully working, secure code. It tests like a real user, copies network/console and logical errors to give them back to cursor. (1 min demo - https://www.youtube.com/watch?v=bN_RgQGa8B0) We felt this was the natural next step for AI coding assistants. And with new asynchronous assistants like codex, having a plug & play tester makes sure you don't have to spend time debugging and…
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 20d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 29d ago · world.pixverse.video
Source: Product Hunt launch ↗
Launched alongside, May 2026
the whole month →
Parallel agents, diff reviewer, and multi-model comparisons
Dev tools · May 2026 · kilo.ai
Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…
Life & fun · May 2026 · github.com
🌱 Private, quiet space for thinking. Simple app for .md files. - zakirullin/files.md
Dev tools · May 2026 · github.com