Directory for vibe coders
Ship the app. Then ship it safely.
ShipSafeStack lists scanners, databases, payments, email, hosting, and the builders people use to take a Lovable, Bolt, v0, Replit, Cursor, Claude Code, or Windsurf app into production. We write the descriptions. Ads stay labeled. We do not sell ranking.
Last updated 16 Oct 2026 · 42 tools
Newsletter
A short weekly note on new tools and security checklists. No spam, unsubscribe anytime.
New this week
8Tools we added or rechecked this week. A fresh list, not a popularity rank.
- AMSecurity scannersPaste a public URL and get an outside-in report on exposed files, secrets in JavaScript, headers, TLS, and similar issues, plus a prompt for your AI tool.
Pricing as seen: Scan and full report listed as free while V2 is rebuilt. Future paid monitoring: See site.
- CHSecurity scannersScans a live app and, if you connect them, the repo and pull requests, then returns ranked findings with a suggested fix.
Pricing as seen: A free account can run scans. Paid plans add fixes, monitoring, and team features. Dollar amounts: See site.
- LOSecurity scannersSecurity review for AI-built web apps covering secrets, Supabase or Firebase policies, auth, and dependencies, plus a free passive leak checker.
Pricing as seen: Quick Review is listed at $29 and only needs a live URL. Other audit prices: See site.
- SCSecurity scannersRuns several scan types — live app, code, dependencies, and cloud checks — from one dashboard aimed at people building with Lovable, Bolt, and similar tools.
Pricing as seen: Free to start, no card listed. Paid tier prices: See site.
- VASecurity scannersScans a running AI-generated web app for leaked secrets, weak data access, auth gaps, and related issues, with a fix you can paste back into the builder.
Pricing as seen: First scan free. Go is listed at $19/month (20 scans, up to 3 projects). Pro is listed at $39/month (150 scans, weekly monitoring, up to 10 projects).
- VISecurity scannersReads a public GitHub repo and returns a preliminary score for leaked keys, open database rules, and unprotected routes.
Pricing as seen: Preliminary score is free for public GitHub repos. A full report is listed at $19.
- VISecurity scannersBlack-box tests a deployed app from the outside, then has a person review findings before the report is delivered.
Pricing as seen: A 14-day Pro trial is listed with no card. Paid plan prices: See site.
- VISecurity scannersRuns free checks for security, speed, SEO, and accessibility against a URL, a public GitHub repo, or pasted code, and returns a fix prompt per finding.
Pricing as seen: Free tier lists 3 scans per month with no signup. Paid plan prices: See site.
Categories
- 01Security scannersPoint something at the live URL or the repo before you invite users.9 tools
- 02Code & dependency securityStatic analysis, dependency risk, and secrets in the repository.6 tools
- 03Database & authWhere the data lives, and who is allowed to read it.7 tools
- 04PaymentsCheckout, subscriptions, and who is the merchant of record.3 tools
- 05EmailTransactional mail and product email that does not live in the browser.2 tools
- 06Hosting & deployWhere the preview becomes a URL with HTTPS.3 tools
- 07Monitoring & analyticsKnow when production breaks, and what people actually do.3 tools
- 08AutomationBackground work that should not run inside a button click.2 tools
- 09AI app buildersThe tools that generated the first version.7 tools
Browse the directory
42 of 42 tools
- AICode & dependency securitySecurity platform that looks across code, cloud, and runtime and tries to open fixes, aimed at teams that do not want five separate scanners.
Pricing as seen: See site.
- AMSecurity scannersPaste a public URL and get an outside-in report on exposed files, secrets in JavaScript, headers, TLS, and similar issues, plus a prompt for your AI tool.
Pricing as seen: Scan and full report listed as free while V2 is rebuilt. Future paid monitoring: See site.
- BADatabase & authOpen-source TypeScript authentication library that lives in your app, with plugins for sessions, social login, and organizations.
Pricing as seen: The framework is open source. Hosted dashboard and enterprise plans: See site.
- BNAI app buildersBrowser-based AI builder for websites and apps, with Bolt Cloud for hosting, databases, authentication, and integrations.
Pricing as seen: See site. The homepage says you can start building for free.
- CHSecurity scannersScans a live app and, if you connect them, the repo and pull requests, then returns ranked findings with a suggested fix.
Pricing as seen: A free account can run scans. Paid plans add fixes, monitoring, and team features. Dollar amounts: See site.
- CCAI app buildersAnthropic’s coding agent for the terminal, IDE, and web, which reads and changes a repository and can open pull requests.
Pricing as seen: See site. Access depends on your Claude plan.
- CLDatabase & authHosted authentication and user management with prebuilt sign-in UI, billed on monthly retained users rather than raw signups.
Pricing as seen: Hobby is free. Pro is $25/month, or $20/month billed annually. Business is $300/month, or $250/month annually. Enterprise is custom. Billing is on monthly retained users.
- CLHosting & deployGlobal network for DNS, CDN, and application hosting, including Workers and Pages, with a free tier for hobby projects.
Pricing as seen: A free tier is listed for hobby projects (DDoS mitigation, universal SSL, global CDN). Paid plan numbers: See site.
- COCode & dependency securityDeep static analysis for C, C++, and other languages, sold for enterprise and safety-critical software. Now offered by AdaCore.
Pricing as seen: Enterprise licensing. See site.
- CODatabase & authBackend building blocks in TypeScript — queries, mutations, and a reactive database — aimed at apps and agents that should stay in sync.
Pricing as seen: See site.
- CUAI app buildersAI coding agent in a desktop editor, the terminal, and other surfaces, for working inside a real codebase.
Pricing as seen: See site.
- FIDatabase & authGoogle's app platform for auth, databases, storage, hosting, and related services used to build and run web and mobile apps.
Pricing as seen: See site. Usage-based Google Cloud billing, with credits sometimes offered for new billing accounts.
- GACode & dependency securityGitHub’s own code scanning, secret scanning, and dependency features for repositories hosted on GitHub.
Pricing as seen: See site. Availability depends on your GitHub plan and whether the repository is public.
- INAutomationDurable functions for background jobs and workflows: steps, retries, and events without operating your own queue.
Pricing as seen: See site.
- LOSecurity scannersSecurity review for AI-built web apps covering secrets, Supabase or Firebase policies, auth, and dependencies, plus a free passive leak checker.
Pricing as seen: Quick Review is listed at $29 and only needs a live URL. Other audit prices: See site.
- LOEmailEmail platform for SaaS teams that sends marketing, product, and transactional lifecycle mail from one place.
Pricing as seen: Free to start, no card required. Paid plan prices: See site.
- LOAI app buildersAI app builder that turns a description into a working product, and says it can host, authenticate, and take payments for what it creates.
Pricing as seen: See site.
- N8AutomationWorkflow automation you can self-host or run in their cloud, combining a visual canvas with code steps and hundreds of integrations.
Pricing as seen: See site. A self-hosted edition exists, and a hosted cloud is offered.
- NEDatabase & authServerless Postgres with branching, plus auth, object storage, and functions. Neon is part of Databricks.
Pricing as seen: See site.
- NEHosting & deployPlatform to build and deploy web apps from git, a CLI, or a prompt, with preview URLs, functions, and edge hosting.
Pricing as seen: See site.
- OZSecurity scannersFree, open-source web application security scanner and proxy for testing a running site, including scripted scans.
Pricing as seen: Free and open source.
- PAPaymentsMerchant of record for software and digital products. Paddle handles payments, sales tax, and compliance across markets.
Pricing as seen: See site. Paddle publishes all-inclusive or custom pricing rather than a simple per-card rate.
- PLMonitoring & analyticsLightweight, cookie-free web analytics hosted in the EU, positioned as a simpler alternative to Google Analytics.
Pricing as seen: Starter shown at $9/month, Growth at $14/month, and Business at $19/month beside a 10k pageview tier on 16 Oct 2026. Confirm the tier on the site.
- POPaymentsMerchant of record and usage billing for software, with subscriptions, credits, and metered events.
Pricing as seen: Free plan listed at 5% + 50¢ per transaction. Paid plans listed at $20, $100, and $400 per month with lower transaction fees (3.80% + 40¢ down to 3.40% + 30¢). A startup program was also listed.
- POMonitoring & analyticsProduct analytics, session replay, feature flags, and error tracking, with usage-based pricing and a large free tier.
Pricing as seen: Usage-based, with free tiers shown at 1 million analytics events/month, 5,000 session recordings/month, and 1 million feature-flag requests/month. Paid rates were listed per unit and fall with volume.
- REAI app buildersOnline environment where an AI agent builds and publishes apps, with built-in auth, database, hosting, and monitoring.
Pricing as seen: See site. The homepage says you can start for free with no card.
- REEmailAPI for transactional and marketing email, with official SDKs and React Email templates.
Pricing as seen: Transactional Free is $0 for 3,000 emails/month, capped at 100/day. Pro starts at $20/month for 50,000 emails. Marketing Free covers 1,000 contacts.
- SCSecurity scannersRuns several scan types — live app, code, dependencies, and cloud checks — from one dashboard aimed at people building with Lovable, Bolt, and similar tools.
Pricing as seen: Free to start, no card listed. Paid tier prices: See site.
- SECode & dependency securityApp security platform that combines custom and built-in rules for SAST, dependencies, secrets, and supply-chain checks in CI and the editor.
Pricing as seen: See site.
- SEMonitoring & analyticsError and performance monitoring for applications, with SDKs that report exceptions and traces from production.
Pricing as seen: See site.
- SNCode & dependency securitySecurity platform for the code AI writes, open-source dependencies, containers, and cloud configuration, with hooks into coding agents.
Pricing as seen: See site.
- SOCode & dependency securityScans open-source packages for malicious behavior and blocks risky dependencies before they are installed or merged.
Pricing as seen: See site.
- STPaymentsPayments and billing infrastructure for cards, checkout, and subscriptions. You are typically the merchant.
Pricing as seen: See site. Card fees vary by country and product, so this entry does not quote a rate.
- SUDatabase & authPostgres database with authentication, file storage, realtime, and edge functions, often the default backend under an AI-built app.
Pricing as seen: Free, then Pro from $25/month and Team from $599/month. Compute is billed per project. Pro includes $10/month in compute credits that cover one Micro instance. Enterprise is custom.
- V0AI app buildersVercel’s AI builder for UI and full-stack features, with one-click deploy onto Vercel infrastructure.
Pricing as seen: See site.
- VEHosting & deployHosting platform for web apps and agents, with preview URLs, serverless functions, and a tight path from v0 and Next.js.
Pricing as seen: See site.
- VASecurity scannersScans a running AI-generated web app for leaked secrets, weak data access, auth gaps, and related issues, with a fix you can paste back into the builder.
Pricing as seen: First scan free. Go is listed at $19/month (20 scans, up to 3 projects). Pro is listed at $39/month (150 scans, weekly monitoring, up to 10 projects).
- VISecurity scannersReads a public GitHub repo and returns a preliminary score for leaked keys, open database rules, and unprotected routes.
Pricing as seen: Preliminary score is free for public GitHub repos. A full report is listed at $19.
- VISecurity scannersBlack-box tests a deployed app from the outside, then has a person review findings before the report is delivered.
Pricing as seen: A 14-day Pro trial is listed with no card. Paid plan prices: See site.
- VISecurity scannersRuns free checks for security, speed, SEO, and accessibility against a URL, a public GitHub repo, or pasted code, and returns a fix prompt per finding.
Pricing as seen: Free tier lists 3 scans per month with no signup. Paid plan prices: See site.
- WIAI app buildersAI code editor with the Cascade agent and cloud agents, for working in a local codebase and delegating longer tasks.
Pricing as seen: See site.
- XADatabase & authBackend platform for building and running APIs, data, and business logic, including with coding agents, on a stack you can govern.
Pricing as seen: See site.