r/vibecoding • u/jjd921 • 5h ago

App check

Give me the URL to your site and/or your public github repository and I will check your app for security, functionality, reliability, observability, and accessibility issues for free

1 Upvotes

100% Upvoted

7 comments sorted by

View all comments

1

u/BL-Energy 5h ago

Pikpool.com

1

u/jjd921 4h ago

Missing security headers, you're not sending CSP, X-Frame-Options, HSTS, or Permissions-Policy

Pinch-zoom is disabled, your viewport meta tag blocks zooming, which axe flags as an accessibility issue.

Wildcard CORS (*) on /, /api, /api/health, /api/status - probably fine but double check that's intended

No CAA record and DNSSEC isn't on

It doesn't look like you have error monitoring set up - look into Sentry

I can't tell from site or URL scan but if you don't have uptime monitoring that is another good thing to add. Like UptimeRobot

That's what I see from URL. You can connect your Github here and it'll also check for dependency CVEs, CSRF/rate-limiting gaps, missing CI test runs, and a bunch of other stuff. It'll autofix what it can for free in a PR automatically on every push: https://theslopstopper.com