Yikes
Find auth gaps and leaked secrets in your vibe-coded app
Yikes launched on February 3, 2026 with 3 votes, #3,486 of 16,627 launches that month and more than 50% of that year's launches.
What it does
Stop shipping security holes. Yikes scans your Next.js + Supabase repo and tells you exactly how you'd get hacked — in plain English. → NEXT_PUBLIC_ secrets exposing your database to everyone → Supabase RLS disabled so users can read each other's data → API routes with no auth checks → Missing rate limits on login/signup Every finding includes a copy/paste fix. No security expertise needed.
Security scanner for Next.js + Supabase apps. Find NEXT_PUBLIC_ secrets, RLS misconfigs, API auth gaps, and missing rate limits. Copy/paste fixes included.
Leaked secrets, auth gaps, RLS misconfigs, SQL injection, XSS, and more. Plain English explanations with the exact code to fix each issue. Tuned for Next.js + Supabase · Free: 1 scan/day · Pro: Unlimited + deeper checks + private repos Enter your email to unlock the full report with all findings and fixes. No critical or high severity issues found. Scan again after fixing to earn this badge. Free scans show every issue. Paid plans unlock private repos and get your codefrom yikessecurity.com
Does a similar job
all alternatives →
LeakScope — Supabase Security AuditorMar 2026 · leakscope.tech · ▲3Scan websites for exposed Supabase data and API leaks
SecureNowDec 2025 · securenow.dev · ▲6Hi HN, I'm an Indie Dev. Building web apps, I struggled to check for vulnerabilities on a surface and a deeper level at the same time. Most free scanners gave vague results or missed dependency issues and tools for deeper searches are mainly for enterprise. Also with vibe coding the issue of security is rising more and more. I built SecureNow - a simple web scanner built with Next.js and Supabase that checks SSL, ports, dependencies, headers, and basic vulns. It caught real issues in my projects. Free basic scans at securenow.app. Feedback on accuracy and missing features? Thanks!
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 21d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 28d ago · corespeed.io
Source: Product Hunt launch ↗
Launched alongside, February 2026
the whole month →
Lovon AI Therapy▲801Feel closer and have more fun with your partner every day!
AI · Feb 2026 · lovon.app
Hello my name is Ben Ward for the past 3 years I have been remastering the financial game Wall Street Raider created by Michael Jenkins originally on DOS in 1986. It has been a rough journey but I finally see the light at the end of the tunnel. I just recently redid the website and thought maybe the full story of how this project came to be would interest you all. Thank you for reading.
Work · Feb 2026 · wallstreetraider.com