roguetink · Product Hunt

MonoCloud for Startups One identity layer for your customers, APIs, and agents

@AICybershieldTe · X

Most sites are one scan away from a very bad day. Scanned ~100 this week — exposed .env files, missing security headers, cookies set before consent (a real GDPR fine). Security + privacy + accessibility, one 90s check: #vibecoding #buildinpublic

u/Salty-Excitement-107 · Reddit

Free security + AI visibility scan. No signup needed. Just finished a project called [Shipleak]( https://www.shipleak.com ). You paste a URL, it runs 65 checks against the live site, takes about twenty seconds. Headers, TLS, cookies, CORS, DNS and email records, common exposed paths, and anything that looks like an API key sitting in your JS bundles. Then the AI visibility half: structured data, whether your content exists before JavaScript runs, whether AI crawlers are allowed, llms.txt. Eac

@WebScore_now · X

@luqmandv · X

I built a free security scanner for vibe-coded apps. You shipped with Cursor, Bolt, or Lovable. But did you check if it's actually safe? Paste your URL → get a plain English security report in 30 seconds. No setup! 👉 #buildinpublic #vibecode

@BinaryScriptar · X

Introducing OtterKit. Always-on webhook endpoints and instant tunnels, built for developers and their AI agents. It started with a problem I kept hitting: every time my coding agent needed to test a Stripe or GitHub webhook, it had to open a tunnel. What OtterKit does • Permanent webhook URLs that answer senders 24/7 with the status, body and headers you choose, verify signatures on arrival (Stripe, GitHub, Shopify, Slack and 12 more), store full history, and forward matching events to your app, signed and retried • Instant HTTPS tunnels to any local port in one command, stable subdomains, auto stop, basic auth • Replay any captured request, edit the payload, re sign it, fire it at your local handler • Pulses: scheduled HTTP calls and dead man's switches with email alerts • Payload drift detection: baseline the JSON shape per event type, get emailed when a provider changes it • Custom domains ( and an email inbox on the same endpoint • A

u/AgitatedLemon6836 · Reddit

I've got too many sites to monitor at this point I have been working on a bunch of different SAAS ideas at this point, some of them are just parked right now as I have decided to market others or have lost passion for the project. Its hard to check logs in a unified fashion for a bunch of different sites, I have backend's on Fly io, Heroku, Vercel, Hetzner and AWS (for varying reasons, some consulting, some work etc). just wanted like text message updates for things with a summary, like "3

@OvadiaYove9462 · X

Too many security issues in vibe coded apps, so I built Automatic AI pentester, crawls and scans your site, runs a full suite of exploit tests, and uses AI to verify each one (cuts false positives) Full report, dashboard, and AI-ready fix instructions

u/RockettBits · Reddit

I built a tool that tells you why a website “looks vibe coded” and how to improve it. Some of us use vibe coding because it’s insanely fast, and honestly, a lot of the results are pretty good. But there’s also this weird thing where you open a website and can almost instantly tell it was vibe coded. Same cards, same rounded corners, same gradients, same spacing, same component-library feel. People usually just call it “AI slop,” but I wanted to understand what actually creates that feeling.

Nqspq

been building a security scanner for vibe-coded apps — it catches leaked API keys, open databases, logins you can bypass. tested it on a repo made for testing scanners. it caught everything — report below free if you want to check yours:

@polsia · X

Vibe-coded your SaaS in a weekend. Privacy policy wasn't in the prompt.

@hexorasec · X

Paid Hexora accounts now get PDF security reports. Every finding with evidence, CVSS scores, remediation steps, and AI fix prompts, in a report you can hand to a client or keep for compliance. Live for Starter, Pro, and Max. #buildinpublic #vibecoding