Whitespace.
See who already built your idea — and the space they left open.

CLUSTER CODE-SECURITY-VULNERABILITIES-2 · 15 ENTRIES · EARLIEST ENTRY 2026-06-22

AI web app security scanners

These products are security scanners that audit AI-generated web applications for vulnerabilities such as exposed secrets, missing access controls, and authentication flaws. Their dated entries before the index start grew from 1 in April 2026 to 3 in July 2026, indicating a gradual increase. Traction is led by vibe-audit with 67 stars, far ahead of PreFlight (9) and domain-security-scanner (1).

Entry timeline

ENTRY TIMELINE

APR 2026: 1MAY 2026: 1JUN 2026: 1JUL 2026: 3AUG 2026: 3SEP 2026: 4OCT 2026: 2
APR 2026OCT 2026

Each bar is the month a member carries, which is a creation date where the source published one and a crawl date otherwise. Nothing in the index was found before 11 August 2026, and coverage broadened sharply on 14–15 August, so a bar from then on reports how much we found that month, not how much was built; an earlier bar reports how far back a member's own source dated it — not how long we have been watching.

Members by activity

Activity signals, not revenue.

Build origin · 7 ai-built · 1 hand-coded · 7 unlabelled

Operator · 5 hobby · 1 indie · 3 commercial · 1 open source · 5 unlabelled

Two labels per entry, never collapsed into one: how it was built, and who stands behind it. Counted over the 15 listed below. Unlabelled means nothing has decided yet — not that the answer is small.

  1. 01PreFlight9★1 moliveai-builtcommercialPreFlight is a free in-browser static security audit tool that scans AI-generated code for vulnerabilities using OWASP and LLM Top 10 probes.
  2. 02mimvo3★3 days—Security scanner that analyzes an AI agent's memory for poisoned facts, hidden instructions, and leaked secrets.
  3. 03domain-security-scanner1★26 days—hobbySecurity scanner that assesses a domain's external security posture through passive checks and generates PDF and JSON reports.
  4. 04Phantomscan1★16 days—ai-builthobbyEnterprise-grade vulnerability scanner that audits AI-generated web apps for hidden secrets, policy flaws, and supply-chain risks.
  5. 05vibe-app-legal-audit0★10 days—ai-builtcommercialScanner that identifies legal‑compliance risks in web applications across US, India, and European regulations, offering exposure patterns.
  6. 06payload-entropy-studio0★3 days—hobbySecurity app that analyzes input strings for attack vectors, measures payload complexity, and generates WAF rules.
  7. 07vibescan1★1 moliveai-builtSecurity scanner that audits AI-generated applications for vulnerabilities like exposed keys and weak access controls, then suggests automatic fixes.
  8. 08Amber-Shield-releases0★23 dayslivecommercialFree local security scanner that maps code vulnerabilities and explains findings through an on-device AI assistant.
  9. 09vibeward0★1 moliveai-builtindieSecurity scanner that audits web apps for exposed secrets and missing access controls, focusing on AI-generated codebases.
  10. 10IDS0★1 mo—A web vulnerability scanner that crawls applications and uses machine learning to detect and identify security threats.
  11. 11sinkcode0★1 mo—ai-builtDesktop application that scans source code for security vulnerabilities and AI-generated code smells.
  12. 12Seaworthy1★3 mo—ai-builthobbyA security scanner that catches common vulnerabilities in AI-generated web applications before deployment, focusing on authentication and data exposure.
  13. 13vibescan-scan0★2 mo—hobbyStatic analysis security scanner that runs fifteen pattern checks to find leaks, disabled security policies, and unverified webhooks in AI-generated code.
  14. 14vunerability-checker0★5 mo—hand-codedA web application that scans domain attack surfaces using Shodan and HIBP, with authentication and AI-powered suggestions.
  15. 15Overview - Agentic Security0★unknownliveopen sourceOpen-source scanner that tests large language model deployments for vulnerabilities to improve AI safety and reliability.

Ranked by traction, highest first, and paged 20 at a time — this is a window on the cluster, never the whole of it. Ties are broken by a stable id so a product cannot appear on two pages or fall between them. Browse every cluster.