Free beta

Built it with AI? Find out what's broken before your users do.

Paste your app's URL. Our test agent clicks through it, types junk into your forms, checks it on a phone, and logs every error. You get a scored report with screenshots as receipts.

Disclaimer (version d1-2026-10-16)

This is an automated, best-effort QA check, not a security audit, penetration test or guarantee. It runs a real browser against your app: it loads pages, clicks buttons it judges safe and types unusual text into inputs. All write requests (POST/PUT/PATCH/DELETE) are blocked, but no automated test can rule out every side effect, so scan a staging copy if you can. You are responsible for having the right to test this app. VibeTierList is not liable for any effect of the scan on your app or data, or for decisions made from the report. Reports are private unless you publish them, and are deleted after 30 days (screenshots after 14). A scan never affects any VibeTierList ranking.

Free beta: up to 5 pages per scan, 1 scan per domain per day. You'll have to prove you own the app first.

How it works

  1. Prove it's yours. Add a meta tag, a /.well-known file or a DNS TXT record. We don't scan apps for people who don't own them.
  2. We test it. A real browser crawls up to 5 pages, clicks safe buttons, fuzzes inputs, runs a mobile pass, and records console and network errors.
  3. You get receipts. A clear verdict (Working, Problems Found or Incomplete), every issue with screenshots, steps to reproduce and a suggested fix, plus a bug report you can paste into your coding agent. It's private unless you publish it.

What we test

Functionality · Forms · Auth (observed, never submitted) · Mobile layout · Console & network errors · Performance basics · Weird inputs. "Not tested" means exactly that. We don't guess a score for something we didn't run.

What we won't do

  • Send any write request. POST, PUT, PATCH and DELETE are all blocked, so forms aren't actually submitted.
  • Click anything that looks like delete, pay, checkout, subscribe, log out, send, publish or settings.
  • Touch live payments. Live Stripe keys and checkout sessions are blocked.
  • Submit passwords or create real accounts.
  • Scan off your domain, or more than 3 times a day.

The trust bit

Paying for a scan never changes any ranking. Tool tiers come only from our fixed tests. Scan reports are private by default. See disclosures.

Show it off: the "Scanned by VibeTierList" badge

Got a clean result? Publish your report and embed the badge on your site. It shows your verdict and scan date and links to the public report. It's opt-in, and unpublishing kills the old link and badge instantly.

Pricing

The beta is free. There are no paid plans right now.

FAQ

Will this break my app? We skip risky buttons and block every write request. Still, scan staging if you can.
Can I scan a competitor? No. You need ownership verification every time.
Is it a security audit? No. It catches basic issues, not a pentest.