How strongly 2 sources agree — expert labs and real owners, with community voices weighted heavier. Not one reviewer’s opinion; the pattern across all of them.
- 55+ checks across 9 security categories (TLS, headers, cookies, DNS, email auth, etc.)
- Free scans with no account required
- Designed for solo devs and non-security experts
- Design is rough — builder admits it's a backend-first project
- Still tuning scanner accuracy (19 bugs found in its own checks during audit)
- Subscription tiers still being reworked
“I was working on a web project and realized I had zero idea if my security headers were configured correctly. I googled around, found some tools, but they were either way too technical (pentest-level stuff I didn't need) or way too shallow (just checking if HTTPS exists). I wanted something in between.”r/vibecoding
What owners love
- 55+ checks across 9 security categories (TLS, headers, cookies, DNS, email auth, etc.)
- Free scans with no account required
- Designed for solo devs and non-security experts
- Scoring calibrated so a 'normal' site scores 40–55, well-configured = 65–80
The recurring gripe
- Design is rough — builder admits it's a backend-first project
- Still tuning scanner accuracy (19 bugs found in its own checks during audit)
- Subscription tiers still being reworked
rabbit.reviews