Purchases are paused while the desk is rebuilt. Nothing on this site can be bought right now. The free grader, the reject chute and the ledger stay open.

AIBZPRO · THE SAMPLE CASE

A SAMPLE CASE FILE · FREE TO READ

Vibe Scanner

This is the exact shape of a $49 case file. Receipts included. Register included. The idea itself is not for sale and never was: it is a specimen, not a product.

THE FRAMING THE DESK READ

WHO: indie founders and small teams who shipped a web app with vibe coding (AI coding assistants) and cannot audit what the AI wrote. PAIN: vibe coding ships security vulnerabilities: exposed API keys, leaked secrets in client bundles, missing input validation, open database rules. Founders learn about the leaked secrets from a stranger on a forum, after the exposed keys are already abused. WEDGE: Vibe Scanner, an automated security scanner tuned for vibe coding output. It crawls the deployed app and the repo, finds the exposed API keys, the leaked secrets and the unprotected endpoints that vibe coding leaves behind, and prints a fix list ranked by blast radius. Not a general vulnerability scanner: a vibe coding security check for people who never learned security.

THE DETERMINATION

NOT-MEASURED

NOT-MEASURED / 130 · FLOOR 65 · 26 DIMENSIONS UNGRADED

The scored rubric is authored inside the live dig by the desk's agent, receipt or abstain, and summed by the engine. This page was typeset from the desk's evidence collector on 2026-08-15; the rubric run for this specimen has not happened yet, so no band, no score and no confidence are printed. Nothing on this page is a guess. When the live desk runs this case, the determination replaces this block and the receipts below stay as they are.

THE THREE DECIDING EXHIBITS

  1. Printed by the engine from the graded dimensions. NOT-MEASURED until the rubric runs.

THE SCORE · 26 QUESTIONS IN 7 CATEGORIES · EVERY SUB-SCORE PRINTED, OR ITS ABSTAIN

CategorySub-dimensionScoreReceipt
Market pain signalHow real, sharp, and repeatedly voiced the problem is. Max 20. Urgency NOT-MEASURED abstain: rubric not run on this build
Specificity of the pain NOT-MEASURED abstain: rubric not run on this build
Pain intensity NOT-MEASURED abstain: rubric not run on this build
Complaint frequency NOT-MEASURED abstain: rubric not run on this build
Market depth and growthWhether the affected market is large and getting larger. Max 15. Adjacent market growth NOT-MEASURED abstain: rubric not run on this build
Search trend trajectory NOT-MEASURED abstain: rubric not run on this build
Volume of affected orgs NOT-MEASURED abstain: rubric not run on this build
Willingness to payEvidence that someone will actually open their wallet. Max 15. Explicit pay signals NOT-MEASURED abstain: rubric not run on this build
Decision-maker in the room NOT-MEASURED abstain: rubric not run on this build
Evidence of current spend NOT-MEASURED abstain: rubric not run on this build
Competitive landscapeWho already owns this space, and whether a solo builder can win. Max 20. Platform gravity NOT-MEASURED abstain: rubric not run on this build
Solo-builder moat NOT-MEASURED abstain: rubric not run on this build
Differentiation clarity NOT-MEASURED abstain: rubric not run on this build
Incumbent vulnerability NOT-MEASURED abstain: rubric not run on this build
Trend and momentumWhether now is the moment, backed by real movement. Max 20. Timing NOT-MEASURED abstain: rubric not run on this build
Related funding and hiring NOT-MEASURED abstain: rubric not run on this build
Search volume trajectory NOT-MEASURED abstain: rubric not run on this build
Community growth velocity NOT-MEASURED abstain: rubric not run on this build
SaaS viabilityWhether it can become a durable, recurring software business. Max 20. Scalability NOT-MEASURED abstain: rubric not run on this build
Unit economics NOT-MEASURED abstain: rubric not run on this build
Defensible moat NOT-MEASURED abstain: rubric not run on this build
Recurring revenue model NOT-MEASURED abstain: rubric not run on this build
Build feasibilityWhether one builder can actually ship and maintain it. Max 20. AI acceleration NOT-MEASURED abstain: rubric not run on this build
API dependencies NOT-MEASURED abstain: rubric not run on this build
Maintenance burden NOT-MEASURED abstain: rubric not run on this build
Technical complexity NOT-MEASURED abstain: rubric not run on this build

Total 130. Floor 65. In a live case every row prints a 1 to 5 score with the receipt id that grounds it, or an abstain with its one-line reason. Abstaining is not failure; it is the product.

THE RECEIPTS · 24 SOURCES, 20 FORUM RECORDS AND 4 PUBLIC PAGES, EVERY ONE READ BY THE DESK ON 2026-08-15

  • R1 . FORUM RECORD . 2025-03-28
    Vibe Coding Security Top 10
    Vibe Coding Security Top 10 news.ycombinator.com
    mentions vibe, coding, security . 4 points, 1 comments at fetch time . read by the desk on 2026-08-15
  • R2 . FORUM RECORD . 2026-04-30
    Vibe Coding Security Weekly - APR 24-28, 2026
    Vibe Coding Security Weekly - APR 24-28, 2026 news.ycombinator.com
    mentions vibe, coding, security . 2 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R3 . FORUM RECORD . 2025-08-31
    Vibe Security - Vibe-coding security scanner that works
    Vibe Security - Vibe-coding security scanner that works news.ycombinator.com
    mentions vibe, coding, security . 2 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R4 . FORUM RECORD . 2025-05-20
    Show HN: Vibe Coding Security Scanner and Tester
    Show HN: Vibe Coding Security Scanner and Tester news.ycombinator.com
    mentions vibe, coding, security . 2 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R5 . FORUM RECORD . 2025-05-11
    Show HN: Vibe Coding Security Hook
    This is a simple git pre-commit hook that uses your locally running Ollama instance to scan your commit for secrets, blocking the commit and suggesting a fix if any secrets are found. news.ycombinator.com
    titled a match for the idea's keywords . 2 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R6 . FORUM RECORD . 2025-04-24
    Vibe Coding for Security
    Vibe Coding for Security news.ycombinator.com
    mentions vibe, coding, security . 2 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R7 . FORUM RECORD . 2026-04-15
    Vibe Coding Security Fixes
    Vibe Coding Security Fixes news.ycombinator.com
    mentions vibe, coding, security . 1 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R8 . FORUM RECORD . 2025-04-08
    Security best practices for vibe coding
    Security best practices for vibe coding news.ycombinator.com
    mentions vibe, coding, security . 5 points, 1 comments at fetch time . read by the desk on 2026-08-15
  • R9 . FORUM RECORD . 2026-04-25
    Asking Qwen3.5-9B, running on 16GB VRAM, to exploit old Windows machines
    Asking Qwen3.5-9B, running on 16GB VRAM, to exploit old Windows machines news.ycombinator.com
    titled a match for the idea's keywords . 3 points, 3 comments at fetch time . read by the desk on 2026-08-15
  • R10 . FORUM RECORD . 2026-06-22
    Verge on Vibecoding
    Verge on Vibecoding news.ycombinator.com
    mentions vibe, coding . 2 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R11 . FORUM RECORD . 2025-08-27
    Why Relying on LLMs for Code Can Be a Security Nightmare
    Why Relying on LLMs for Code Can Be a Security Nightmare news.ycombinator.com
    mentions security . 2 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R12 . FORUM RECORD . 2026-05-27
    Vibe Coding as a Security Architect
    Vibe Coding as a Security Architect news.ycombinator.com
    mentions vibe, coding, security . 1 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R13 . FORUM RECORD . 2026-04-22
    Lovable left projects exposed for 48 days
    Lovable left projects exposed for 48 days news.ycombinator.com
    mentions exposed . 1 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R14 . FORUM RECORD . 2025-09-01
    Why Relying on LLMs for Code Can Be a Security Nightmare: Terminal
    Why Relying on LLMs for Code Can Be a Security Nightmare: Terminal news.ycombinator.com
    mentions security . 1 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R15 . FORUM RECORD . 2026-03-22
    Vibe Coding Is a Security Disaster That Is About to Happen
    Vibe Coding Is a Security Disaster That Is About to Happen news.ycombinator.com
    mentions vibe, coding, security . 9 points, 7 comments at fetch time . read by the desk on 2026-08-15
  • R16 . FORUM RECORD . 2026-01-13
    Vibe Coding Debt: The Security Risks of AI-Generated Codebases
    Vibe Coding Debt: The Security Risks of AI-Generated Codebases news.ycombinator.com
    mentions vibe, coding, security . 3 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R17 . FORUM RECORD . 2025-07-10
    Vibe Coding: Trend or Security Disaster Waiting to Happen?
    Vibe Coding: Trend or Security Disaster Waiting to Happen? news.ycombinator.com
    mentions vibe, coding, security . 1 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R18 . FORUM RECORD . 2026-03-04
    Security with Vibe Coding Platforms
    I do a ton of vibe coding, but after looking closely at the code my agents were spitting out, I got curious. news.ycombinator.com
    mentions vibe, coding . 1 points, 1 comments at fetch time . read by the desk on 2026-08-15
  • R19 . FORUM RECORD . 2026-02-14
    Hold the security: a vibe-coding story
    Hold the security: a vibe-coding story news.ycombinator.com
    mentions vibe, coding, security . 1 points, 1 comments at fetch time . read by the desk on 2026-08-15
  • R20 . FORUM RECORD . 2025-03-22
    Fundamentals of web security for vibe coding
    Fundamentals of web security for vibe coding news.ycombinator.com
    mentions vibe, coding, security . 1 points, 0 comments at fetch time . read by the desk on 2026-08-15
  • R21 . FORUM RECORD . 2026-04-28
    Vibe Coding Security Weekly - Apr 28, 2026: Wiz Red Agent, SecureVibeBench, Red Gate's DB Failure Patterns | VibeEval
    Vibe Coding Security Weekly - Apr 28, 2026: Wiz Red Agent, SecureVibeBench, Red Gate's DB Failure Patterns | VibeEval VIBEEVAL . vibe-eval.com
    mentions vibe, coding, security . read by the desk on 2026-08-15
  • R22 . LEDGER . 2025-04-15
    Vibe-coding for security - text/plain
    Vibe-coding for security - text/plain Skip to content text/plain ericlaw talks about security, the web, and software in general Vibe-coding for security Posted by ericlaw 2025-04-15 2025-09-23 Posted in dev , security Tags: AI , InfoSecTTP , security Recently, there’s been a surge in the popularity of trojan clipboard attacks whereby the attacker convinces the user to carry their attack payload ac textslashplain.com
    mentions vibe, coding, security . read by the desk on 2026-08-15
  • R23 . FORUM RECORD . 2026-04-15
    ZAP - Vibe Coding Security Fixes
    ZAP - Vibe Coding Security Fixes Blog Videos Documentation Community Download Vibe Coding Security Fixes The ZAP Blog Posted Wednesday April 15, 2026 634 Words We want to be very clear upfront: ZAP is absolutely, definitively, 100% not jumping on the AI bandwagon. www.zaproxy.org
    mentions vibe, coding, security . read by the desk on 2026-08-15
  • R24 . PHOTOGRAPH . 2025-04-01
    20 security best practices for vibe coding - Appwrite
    20 security best practices for vibe coding - Appwrite Skip to content Start project Products Products _ Auth Secure login with multi-factor auth. appwrite.io
    mentions vibe, coding, security . read by the desk on 2026-08-15

COULD NOT VERIFY · THE REGISTER

  • Vibe Coding Security Top 10 | Vibe Security
    tried forum. the page carries no machine-readable date: dropped, not estimated
  • https://vibesecurity.co/
    tried forum. the page carries no machine-readable date: dropped, not estimated
  • VibeEval - AI Security Testing for AI-Generated Apps
    tried pricing. the page carries no machine-readable date: dropped, not estimated
  • GitHub - edverma/vibe-code-security-hook · GitHub
    tried review. the page carries no machine-readable date: dropped, not estimated
  • Reddit search
    tried reddit. not attempted from the build machine for the static sample; the live dig runs it from the desk

RIVALS FOUND IN THE RECEIPTS · PRICES NOT-MEASURED ON THIS BUILD

  • Vibe Security - Vibe-coding security scanner that works [r3]
    news.ycombinator.com . price: not fetched on this build . live cases fetch the pricing page and print it, or say it is not public
  • Show HN: Vibe Coding Security Scanner and Tester [r4]
    news.ycombinator.com . price: not fetched on this build . live cases fetch the pricing page and print it, or say it is not public
  • Show HN: Vibe Coding Security Hook [r5]
    news.ycombinator.com . price: not fetched on this build . live cases fetch the pricing page and print it, or say it is not public
  • Vibe Coding Security Weekly - Apr 28, 2026: Wiz Red Agent, SecureVibeBench, Red Gate's DB Failure Patterns | VibeEval [r21]
    vibe-eval.com . price: not fetched on this build . live cases fetch the pricing page and print it, or say it is not public
  • ZAP - Vibe Coding Security Fixes [r23]
    www.zaproxy.org . price: not fetched on this build . live cases fetch the pricing page and print it, or say it is not public
  • 20 security best practices for vibe coding - Appwrite [r24]
    appwrite.io . price: not fetched on this build . live cases fetch the pricing page and print it, or say it is not public

THE NEXT CHECKS THE DESK WOULD RUN

  • Run the rubric on this pack inside the live dig, receipt or abstain, and print the determination.
  • Read the Reddit lanes the static build skipped (r/SideProject, r/SaaS, r/indiehackers and the rest) for witness statements from founders who shipped vibe-coded apps.
  • Re-fetch Vibe Coding Security Top 10 | Vibe Security with a dated snapshot, so it can enter the receipts instead of the register.
  • Re-fetch https://vibesecurity.co/ with a dated snapshot, so it can enter the receipts instead of the register.
  • Re-fetch VibeEval - AI Security Testing for AI-Generated Apps with a dated snapshot, so it can enter the receipts instead of the register.
  • Re-fetch GitHub - edverma/vibe-code-security-hook · GitHub with a dated snapshot, so it can enter the receipts instead of the register.
  • Fetch the pricing pages of the rivals above and print the prices where public.

WHO WROTE THIS

Prepared by Bunbun, the demand desk of Bunbun Labs. Authored by an AI agent operated by Bunbun Labs. Every receipt was fetched and liveness-checked by machine. An automated honesty gate checked this report before it was published, and a human samples reports every day.

WANT THIS FOR YOUR IDEA?

The desk is on the front page. Describe the idea, watch the dig, read the determination. The score and three receipts are free; the case file is $49, the case file with the spec pack is $79. All sales final.

OPEN A CASE