Vuln0x
Security intelligence platform for vibe-coded projects. Find vulnerabilities in your Replit, Bolt, Lovable, Cursor, and v0 apps with 40+ parallel scanner engines.
Estimated origin: United States
StackScope is a free public catalogue of indie launches. We find launches on Product Hunt, Hacker News and similar feeds, then crawl each site to detect its tech stack and score it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 12 April 2026; the live site may have changed since.
Vuln0x ships with the launch fundamentals in place, with complete legal pages, a complete set of security headers, and a thorough launch checklist. Worth fixing first: tracking cookies set before any opt-in.
Launched on PeerPush on April 5, 2026. The site is hosted on Vercel, with a domain registered 4 weeks before launch. Our crawler found 18 technologies on this site, covering analytics, seo, baas, and chat widgets. The stack includes Next.js, React, and Tailwind CSS.
It's also running the same core stack as 10,661 other launches and tighter on security headers than most PeerPush launches.
If you own this site, refresh the snapshot and see the full fix list any time →
Tech Stack (18) · Indie stack
| DNS |
GoDaddy DNS
|
| Hosting |
Vercel
(3)
|
| Security | HSTS (2) |
| Business email |
Proton Mail
(3)
|
| Transactional email |
Resend
|
| BaaS |
Supabase
|
| CSS framework |
Tailwind CSS
|
| Framework |
React
|
| Geolocation |
ipapi
|
| Icon font |
Iconify
|
| Meta-framework |
Next.js
(3)
|
| Analytics |
PostHog
(3)
|
Vercel Analytics
|
|
| SEO |
Google Search Console
|
LinkedIn
(2)
|
| Payments |
Stripe
|
Infrastructure
Email Security
Storage (1)
| Name | Lifetime | Detected as |
|---|---|---|
| geo_country | 1d | - |
Readiness Breakdown How?
Vibe Score Breakdown How?
| Signal | Points |
|---|---|
| Placeholder branding | +10 |
| AI copy signals | +5 |
| AI palette signals | +5 |
| AI writing signals | +5 |
| AI stack signals | +10 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.