Honest comparison
Cells marked "?" are unverified — we could not confirm them from public sources.
| Competitor | Price | Proof of exploit | Fix PRs | Deploy / CI gate | MCP | Benchmark | Notes |
|---|---|---|---|---|---|---|---|
| SecureIndie | Free quick check; $49 one-off audit; Pro $29/mo | read-only live proof (Supabase, Firebase, nonce-proven LLM spend) — audit and Pro | Yes, via API / MCP; policy-gated, a human merges | GitHub App check runs on pull requests + re-check on deploy (Pro) | 7 tools | gapbench passive tier (free check): 8/10 live, 0 false positives on 4 clean apps (Sept 2026) | Live. Never writes to your app. Row updated 2026-10-11 |
| CheckVibe | Free → $99/mo solo; $25–50/seat team | "Active tests" (beta) | Yes, AutoFix opens PRs | Yes, CI merge gate | Yes | No | Now the closest analogue to SecureIndie's full loop |
| VibeEval | $49 Pro / $149 Team / $499 lifetime | Reproduced evidence + human check | No | No | Yes | Owns gapbench, refuses to publish its own recall | Added MCP + webhooks |
| Vibe App Scanner | $29 / $49 | Live DB/auth tests, no exploit shown | No (markdown export) | No | Yes (new) | No | Added MCP |
| securityscanner.dev (new) | $9/scan, $29–99/mo | Read-only probes with reproducible curl | No (SECURITY-FIX.md) | Webhooks only | Yes | No | Supabase + Firebase probes, trust badge |
| Perfai Security (new) | Free, credit-limited | Claims 20k exploit mutations live | Fix agent into Cursor/Lovable | No | ? | No | Loudest live-exploit claim; unverified |
| Supabase native | Free | Static lint | Assistant applies RLS SQL | No | Yes | No | Widened MCP exposure of advisors |
| Replit Security Agent | Free | "Verifies exploitability" | In-platform remediation | No | No | No | Workspace Security Center 2.0 (SBOM, org dashboard) |
| Semgrep / Snyk | Per seat | No | Semgrep autofix on Code findings | CI | Guardian blocks the agent until clean | No | Scan-inside-the-agent-turn is now their story |
| Aikido | $350+/mo | Paid pentest add-on | Some | CI | ? | No | Unchanged |
| Keelscan (new) | Free scan; $29–49/mo (founding $29/mo for life, first 50) | Static + live header/DB-config checks; no exploit shown (unverified) | No (plain-English fixes) | No | ? | No | Added 2026-10-08, after the deep review. A–F grade; SOC 2/HIPAA control mapping and security-questionnaire drafting, sold for passing buyer security reviews. Solo founder, launched ~Jul 2026 |
| shipsafe.sh | Free CLI, ~21k installs | n/a (static agent-config scanner) | n/a | n/a | n/a | n/a | Name collision, not a competitor |
Last checked 2026-09-14 — corrections: abuse@secureindie.com