Security and GDPR checks inside your coding agent. Ask me anything

Hey Product Hunt, I'm Oshadha, the maker of Vibefilo.

AI tools make shipping an app fast, but they also ship leaked secrets, Supabase tables without RLS, API routes that don't check ownership, and analytics that load before consent. Most builders never see these until something breaks.

What Vibefilo does: it runs security and GDPR checks from inside Claude Code, Cursor, Codex, Windsurf or VS Code. Your agent finds the issues, fixes them, and a re-check verifies every fix. A finding only closes after a passing re-check.

Your code stays on your machine. Only the rule, file, line and a masked snippet are sent, and secret values never leave your computer.

No subscription. You pay per check, and every new account gets 100 free credits (enough for one Full check).

Try it in one command: npx @vibefilo/mcp init

Docs to get started:

Introduction: https://vibefilo.dev/docs/introduction

Install: https://vibefilo.dev/docs/install

Run your first check: https://vibefilo.dev/docs/first-check

Modes and credits: https://vibefilo.dev/docs/modes-and-credits

Understanding findings: https://vibefilo.dev/docs/findings

Privacy and masking: https://vibefilo.dev/docs/privacy-and-masking

MCP tools: https://vibefilo.dev/docs/mcp-tools

FAQ: https://vibefilo.dev/docs/faq