https://shipreadyai.dev/compare/vibeship-scanner

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# ShipReady vs VibeShip Scanner

A free open-source scanner that checks public repositories and returns AI-oriented fix guidance.

# ShipReady vs VibeShip Scanner
A free open-source scanner that checks public repositories and returns AI-oriented fix guidance.
Facts about VibeShip Scanner were read from their site on the dates shown. Tell us if something changed.
## Score or evidence
- **Them.** The scanner reports finding lists from a stated rule set, not a single score. Source: https://github.com/vibeforge1111/vibeship-scanner/ (read 2026-09-14).
- **Us.** No score, no grade, no badge. Every finding shows the request that produced it and the date it was read.
## What they show and what they keep
- **Them.** Anyone can run a scan on the public interface. The source itself is Apache-2.0. Source: https://github.com/vibeforge1111/vibeship-scanner/ (read 2026-09-14).
- **Us.** The full free result is shown to anyone with the check id. Nothing is gated behind a paywall or an account.
## What they do to your app
- **Them.** Scans public repositories and issues outside requests. It does not sign in as your users or execute your database functions. Source: https://vibeship-scanner-production.up.railway.app/ (read 2026-09-14).
- **Us.** Deterministic outside requests only. Never signs in, never executes a function on your database, never reads another account's data.
## What neither can see from outside
- **Rollback and recovery.** Whether you can put the previous version back, and how long that takes.
- **Error monitoring.** Whether a failure in production reaches a human rather than sitting in a log nobody opens.
- **Sign in and account flows.** Whether sign in, password or code reset, and session expiry behave under real use.
- **Rate limiting and abuse controls.** Whether a script can hammer your forms, sign up loop, or paid endpoints without being slowed down.
- **Key rotation.** Whether you can replace a leaked key quickly and know everywhere it is used.
- **Certificate expiry date.** Whether the certificate is close to expiring. A normal request proves the certificate is valid right now, and the runtime this check uses cannot read the expiry date from that request.
- **One account reading another account's data.** Whether a signed in account can reach another account's records by changing an id. ShipReady does not create accounts, sign in, or call your functions, so this cannot be answered from outside.
- **Payment handling.** Whether payment events are verified, replay safe, and matched to the right customer record.
- **Customer data handling.** Whether stored personal details are limited, deletable on request, and out of your logs.
- **AI feature controls.** Whether prompts, spend, and model output are bounded so one visitor cannot run up the bill.
- **Database row rules.** Whether the row rules behind the app actually stop one signed in account reading another's rows.
## Fixes
- **Them.** Prompts framed for AI coding tools accompany findings. Public pages do not list per-builder templates. Source: https://github.com/vibeforge1111/vibeship-scanner/ (read 2026-09-14).
- **Us.** Every finding carries five fix prompts for Lovable, Bolt, Base44, v0 and generic coding assistants, hand written per finding.
## Beyond security
  - Legal page links: them no, us yes
  - Email authentication: them no, us yes
  - Domain expiry: them no, us yes
  - Cookie flags: them no, us yes
  - Platform trust evidence: them no, us yes
  Source: https://github.com/vibeforge1111/vibeship-scanner/
## What happens next
- **Them.** Read the findings, paste the AI prompt into your coding tool, or self-host the scanner from the repository. Source: https://github.com/vibeforge1111/vibeship-scanner/ (read 2026-09-14).
- **Us.** You can stop at the free check, or buy the Release Gate at $49 for the package, the Launch Review at $199 for a person, or the Hardening Sprint at $1,750 for the fix work.
## Competitor strengths
Open source under Apache-2.0 with a large stated rule set and AI fix prompts. Anyone can read the scanner code and self-host it.
## Choose them if
You want to read the scanner's code, self-host it inside your own environment, and get prompts to paste into an AI coding tool without paying for a service.
## Sources
- https://vibeship-scanner-production.up.railway.app/
- https://github.com/vibeforge1111/vibeship-scanner/