Question 1

What is VibeGuard?

Accepted Answer

VibeGuard is a security scanner for AI-generated code. It runs locally on your machine, never uploads your code, and catches leaked secrets, vulnerable dependencies, and security issues in one command.

Question 2

Is VibeGuard free?

Accepted Answer

Yes, VibeGuard has a free tier with unlimited local scans. Pro plans starting at $19/month add CI/CD integration, team features, and priority support.

Question 3

Does VibeGuard upload my code?

Accepted Answer

No. VibeGuard is local-first. All scanning happens on your machine. Your code never leaves your computer unless you explicitly opt-in to cloud features.

Question 4

What languages does VibeGuard support?

Accepted Answer

VibeGuard supports all major programming languages including JavaScript, TypeScript, Python, Go, Rust, Java, Ruby, PHP, and more. It auto-detects your project type.

Question 5

How do I install VibeGuard?

Accepted Answer

Run 'npx vibeguard' in your terminal. No signup required. It works immediately on any project with Node.js installed.

Question 6

Can I use VibeGuard in CI/CD?

Accepted Answer

Yes. VibeGuard outputs SARIF format and integrates with GitHub Actions, GitLab CI, Jenkins, and other CI systems. Pro plan includes native CI/CD integration.

Question 7

What security issues does VibeGuard detect?

Accepted Answer

VibeGuard runs 11 scanners to detect: leaked API keys and secrets, vulnerable dependencies, SAST issues, license compliance problems, hardcoded credentials, and common security anti-patterns.

Question 8

How is VibeGuard different from Snyk or Checkmarx?

Accepted Answer

VibeGuard is local-first (no code upload), runs in one command (no configuration), and is built specifically for AI-generated code workflows. Enterprise tools require accounts, dashboards, and cloud uploads.

Frequently Asked Questions

Getting Started

Scanning & Reports

Patching (Pro)

CI/CD Integration

Privacy & Security

Pricing & Plans

Still have questions?