01Compare
PreFlight vs other vibe-code scanners: an honest comparison
There are good tools for checking an AI-built app. They check different things and charge differently. Here's how they line up, using each tool's own website (checked October 20, 2026). If something here is out of date, tell us and we'll fix it.
| Tool | Checks (as stated) | What it looks at | Price | One-time or subscription | Source (checked 10/20/2026) |
|---|---|---|---|---|---|
| PreFlight | 65 checks | Live site from the outside: exposed keys and files, HTTPS and security headers, cookies/CORS, page speed, search, links, email/DNS, accessibility basics; Supabase/Firebase table checks after you verify ownership | First scan per site free (your score out of 65 + your top 3 fixes). $19 for 1 scan, $49 for 3, $69 for 5. Each scan includes 1 free re-check. 14-day refund on unused scans | One-time | https://preflightscan.app/pricing |
| VibeCheck (vibecheck.ac) | 8 checks | Live app, outside only ("We only see what any visitor can already see") | Problems list free (email needed). $9 fix report, or $29 for 10 | One-time | https://vibecheck.ac |
| VibeCheck (getvibecheck.dev) | Not stated | Public GitHub repo or live URL: leaked keys, open databases, unprotected routes, Supabase policies, npm package vulnerabilities | Free score (no email). $19 Full Report (free re-scans for 30 days). Monitoring $99/yr or $12/mo (3 repos/sites, weekly) | One-time report; monitoring is a subscription | https://getvibecheck.dev |
| CheckVibe | "100+ security checks" | Live URL + connected code repo (code, dependencies, secrets), monitoring | 14-day free trial; Starter $24/mo, Pro $49/mo, Max $99/mo; team plans from $25/seat/mo | Subscription | https://checkvibe.dev/pricing |
| RowShield | 9 rules | Supabase only: RLS, policies, storage, key exposure; free URL check runs the two probe rules | Free URL check + 1 project daily audit free; Indie $29/mo, Team $99/mo | Subscription (free tier) | https://rowshield.dev |
| Supabase Security Advisor | Not stated as a count | Inside your Supabase project: misconfigured RLS policies and other database security/performance issues | Ships with Supabase | Included with Supabase | https://supabase.com/docs/guides/observability/advisors |
Tool
PreFlight
- Checks (as stated)
- 65 checks
- What it looks at
- Live site from the outside: exposed keys and files, HTTPS and security headers, cookies/CORS, page speed, search, links, email/DNS, accessibility basics; Supabase/Firebase table checks after you verify ownership
- Price
- First scan per site free (your score out of 65 + your top 3 fixes). $19 for 1 scan, $49 for 3, $69 for 5. Each scan includes 1 free re-check. 14-day refund on unused scans
- One-time or subscription
- One-time
- Source (checked 10/20/2026)
- https://preflightscan.app/pricing
Tool
VibeCheck (vibecheck.ac)
- Checks (as stated)
- 8 checks
- What it looks at
- Live app, outside only ("We only see what any visitor can already see")
- Price
- Problems list free (email needed). $9 fix report, or $29 for 10
- One-time or subscription
- One-time
- Source (checked 10/20/2026)
- https://vibecheck.ac
Tool
VibeCheck (getvibecheck.dev)
- Checks (as stated)
- Not stated
- What it looks at
- Public GitHub repo or live URL: leaked keys, open databases, unprotected routes, Supabase policies, npm package vulnerabilities
- Price
- Free score (no email). $19 Full Report (free re-scans for 30 days). Monitoring $99/yr or $12/mo (3 repos/sites, weekly)
- One-time or subscription
- One-time report; monitoring is a subscription
- Source (checked 10/20/2026)
- https://getvibecheck.dev
Tool
CheckVibe
- Checks (as stated)
- "100+ security checks"
- What it looks at
- Live URL + connected code repo (code, dependencies, secrets), monitoring
- Price
- 14-day free trial; Starter $24/mo, Pro $49/mo, Max $99/mo; team plans from $25/seat/mo
- One-time or subscription
- Subscription
- Source (checked 10/20/2026)
- https://checkvibe.dev/pricing
Tool
RowShield
- Checks (as stated)
- 9 rules
- What it looks at
- Supabase only: RLS, policies, storage, key exposure; free URL check runs the two probe rules
- Price
- Free URL check + 1 project daily audit free; Indie $29/mo, Team $99/mo
- One-time or subscription
- Subscription (free tier)
- Source (checked 10/20/2026)
- https://rowshield.dev
Tool
Supabase Security Advisor
- Checks (as stated)
- Not stated as a count
- What it looks at
- Inside your Supabase project: misconfigured RLS policies and other database security/performance issues
- Price
- Ships with Supabase
- One-time or subscription
- Included with Supabase
- Source (checked 10/20/2026)
- https://supabase.com/docs/guides/observability/advisors
Where others are stronger (say it plainly):
- Code-level scanning: getvibecheck.dev and CheckVibe read your repo (packages, secrets in code). PreFlight only sees what a visitor sees.
- Deep Supabase checks: Supabase's own Advisor and RowShield look at your actual policies. PreFlight tests from outside. Run the Supabase Advisor too; it ships with Supabase.
- Ongoing monitoring: getvibecheck.dev, CheckVibe and RowShield re-check on a schedule. PreFlight is a one-time snapshot with a free re-check, not ongoing monitoring.
- Cheapest fix list: vibecheck.ac's $9 report is cheaper than ours, for 8 checks vs 65.
Where PreFlight fits: You're about to launch and want one wide check of the live site (security, speed, search, links, email setup, accessibility) without a subscription. 65 checks, the first scan is free, then $19 one-time with a free re-check.
Prices and features are from each tool's own site on October 20, 2026. We make PreFlight, so we're biased; that's why every row links to the source.