Automatic security testing for small sites

Built it fast? Let’s make sure it’s safe.

Vibetest runs an automatic security test on your website and sends you a plain-English report in a few hours. Made for vibe coders and small startups — not enterprises with 500 pages to scan.

No account needed. You’ll just need access to your domain’s DNS settings.

$199 $399 per test

How it works

Easy to start

  1. Tell us your site

    Type in the address. We check it’s online before you go any further.

  2. Prove it’s yours

    Add one DNS record. We spot it the moment it’s there — we only test sites whose owners asked us to.

  3. Securely provide credentials

    Optional: if your site has a login, share a temporary test account so we can check behind it too. Never your real admin account.

That’s it. Pay, and your report is ready in a few hours.

What we look for

Common security gaps

  • Exposed files and pages

    Config files, backups and admin pages that were never meant to be public.

  • Outdated software

    Frameworks and libraries with known security holes.

  • Forms that can be tricked

    Inputs that let someone read or change data they shouldn’t, like SQL injection.

  • Missing protections

    Weak HTTPS settings and the browser security headers most sites forget.

Sample report shopfront-demo.app

Issues found

  • 0Critical
  • 2High
  • 1Medium
  • 4Low
  • 6Info
High Finding 1 of 13

Logging out doesn’t fully log you out

When someone logs out, their old login cookie keeps working. If someone else gets hold of it — say, on a shared computer — they can get straight back into that account.

How to fix: when someone logs out, end their session on your server too — not just in their browser.

Prompt for your AI tool

When a user logs out, invalidate their session on the server as well as clearing the cookie, so an old session cookie can’t be reused. Then add a test that logs in, logs out, and checks the old cookie is rejected.

Paste into your preferred AI tool acting on your site’s code. Remember to test and validate yourself.

Your report

What you get back

A short summary, a count of issues by severity, then each finding explained in plain English: what it is, why it matters and how to fix it. Every finding comes with a ready-made prompt you can paste into your AI tool to fix it. It also says plainly what we didn’t test, so you know where you stand.

  • A short summary up top
  • Issues counted by severity
  • What it is, why it matters, how to fix it
  • A copy-paste prompt to fix each one with AI
  • What we didn’t test

Pricing

Simple pricing

On sale · 50% off

$199 normally $399

per website test

  • A full automatic security test of one website
  • A plain-English report in a few hours
  • Every finding explained — with a prompt your AI tool can use to fix it
  • A private link to your report — no account needed
Check my site

You only pay at the last step — after we’ve checked your site is online and yours.

Honest fit

Is Vibetest right for you?

A great fit

  • A side project, an MVP or a startup’s first product
  • Sites built quickly with AI tools like Claude, Cursor, Lovable, Bolt or Replit
  • Anyone who wants a second opinion before launch

Probably not for you

  • Large sites with hundreds of pages
  • Anything regulated, or holding very sensitive data

For those, a full pen test from a specialist security firm is money well spent.

Built by Grainbox with input from security and technology experts.

Meet the team

Ready when you are.

Pop in your address and we’ll walk you through the rest, one small step at a time.

On sale: $199 $399 50% off