VibeDefend by CybeDefend
Scans your AI coding agent's diffs for SQL injection, leaked secrets and malicious packages.
VibeDefend sits between your AI coding agent (Claude Code, Cursor, Windsurf, Copilot, Codex) and your codebase, scanning each diff and blocking specific mistakes: SQL injection, secrets committed to code, malicious npm packages, vulnerable dependencies by CVE, public S3 buckets, unsafe bulk deletes, and business-rule violations like a loyalty-points calculation ignoring a documented rule. It also checks the agent's tool calls themselves, for example blocking an MCP-triggered attempt to copy a `.env` file into a public repo. Install is one command that auto-detects every agent already on your machine.
What holds up
- +Blocks concrete, named threats — CVE-tagged dependencies, compromised GitHub Action tags, secrets in diffs.
- +Checks agent tool calls too, like blocking an MCP call that tries to copy .env into a public repo.
- +One install command detects and covers every coding agent already on your machine, not just one.
Picked here? Add the badge
Put it on your site. It links back to this page. Free for every listed product.
<a href="https://stillworks.dev/products/p/vibedefend-by-cybedefend/"><img src="https://stillworks.dev/badge/vibedefend-by-cybedefend.svg" alt="Picked by StillWorks" width="230" height="54"></a>