Open Source · MIT Licensed

Ship AI code fast.

VibeGuard is your automated security guard. It catches hardcoded secrets, SQL injections, and SSRF in your AI-generated code before you deploy.

Terminal — vibeguard-scan
$ npx vibeguard-scan
Scanning 24 files...
🔍 AST analysis in progress...
Vibe Code Safety Score: 100/100
Rating: 🟢 Excellent
secrets: 0 found
sql-injection: 0 found
ssrf: 0 found
xss: 0 found
eval-usage: 0 found
$
How It Works

Three steps to

VibeGuard transforms your AI-assisted workflow from risky to resilient in seconds.

Step 1

Lightning Fast

Runs instantly locally with zero configuration. No setup, no config files, no waiting. Just scan and ship.

> $ vibeguard-scan
Step 2

Advanced AST Engine

Uses a lightweight Abstract Syntax Tree to trace variables and data flow — not just dumb regex pattern matching.

> ast://deep-trace
Step 3

Interactive Auto-Fix

One command to fix everything. VibeGuard interactively removes vulnerabilities and rewires your code safely.

> $ npx vibeguard-scan fix .

Interactive Playground

Test VibeGuard instantly in your browser. Paste an AI-generated snippet below and see what it catches.

VIBEGUARD TERMINAL

Click "Run VibeGuard" to analyze the code.

AI Integration

Built natively for

VibeGuard plugs into the Model Context Protocol (MCP) — so your AI assistants can protect themselves.

MCP Setup
# Add to your MCP config
"mcpServers": {
"vibeguard": {
"command": "npx",
"args": ["-y", "vibeguard-scan", "mcp"]
}
}
# Or run directly
$ npx -y vibeguard-scan mcp

What is MCP?

The Model Context Protocol is a standard that lets AI assistants like Cursor and Claude call external tools. VibeGuard acts as an MCP server — giving your AI real-time security analysis superpowers.

How it works

Cursor and Claude can automatically run VibeGuard in the background to check their own code. Every function, every endpoint, every line — scanned before it hits your clipboard.

Zero friction

One config line. That's it. Your AI tools start shipping vulnerability-free code automatically — no workflow changes needed.

Safety Score

Know your

Every scan produces a score from 0 to 100 — your code's security health at a glance.

0out of 100

Score Tiers

🟢
Excellent90–100
🟡
Good70–89
🟠
Needs Work50–69
🔴
Critical0–49

Start scanning in

No installation. No config. Just run.

Quick Start
# Scan your project
$ npx vibeguard-scan
# Auto-fix vulnerabilities
$ npx vibeguard-scan fix .
# Start MCP server for Cursor / Claude
$ npx -y vibeguard-scan mcp

Frequently Asked Questions

Everything you need to know about how VibeGuard works and keeps your codebase secure.

No, it runs 100% locally on your machine! VibeGuard does not require an internet connection to scan your files. Your code never leaves your computer, ensuring total privacy.