Vibesec is a security-first code review and vulnerability prevention framework that adopts a bug hunter's mindset to safeguard web applications prior to production. It systematically detects and mitigates critical security vulnerabilities such as IDOR, XSS, CSRF, SSRF, SQL injection, open redirects, mass assignment, and sensitive data leakage. By integrating robust authorization checks, input validation, context-aware output encoding, and secure session management, Vibesec ensures engineering teams fail securely, maintain defense-in-depth, and eliminate common attack vectors during active feature development and pre-merge audits.
주요 기능
01Comprehensive vulnerability checks covering IDOR, XSS, CSRF, SSRF, and SQLi
02Open redirect attack detection with domain allowlists and homograph attack prevention
03Pre-merge security auditing with bug-hunter perspective review checklists
04Deep authorization verification at the data layer to prevent horizontal and vertical privilege escalation
0523 GitHub stars
06Defensive client-side auditing for DOM sanitization, CSP rules, and sensitive data exposure
사용 사례
01Securing state-changing operations against CSRF and validating outbound server requests against SSRF
02Reviewing authentication, session lifecycle, and JWT handling logic before merging pull requests
03Auditing newly implemented REST or GraphQL endpoints for authorization flaws and IDOR vulnerabilities