vibe-sec

Vibe Sec is a tier-aware security audit and orchestration layer for vibe-coded apps that scans for security gaps (secrets, CVEs, auth flows, input validation), prioritizes findings by app type and deployment context, and generates fixes proportional to actual needs. It defers to gitleaks, OSV-Scanner, and Semgrep when available, falls back to an in-house baseline, and provides nine commands for scanning, auditing, fixing, CI gating, posture assessment, threat modeling, and security research.