Hey HN,
We just launched an early version of Circuit — a lightweight tool that helps vibe coders, citizen developers, and indie hackers run fast security scans focused on the OWASP Top 10 vulnerabilities and get practical fixes.
The problem we noticed:
A lot of projects being built in no-code/low-code environments (Replit, Lovable, V0, Bubble, etc.) ship quickly but rarely get security reviewed.
Even small apps often expose APIs, misconfigure auth, or leak secrets without realizing it.
With Circuit, you can:
• Submit your app URL
• Get a security report checking OWASP Top 10 vulnerabilities
• Get suggested fixes for the issues found (not just a scary list)
We’re aiming to make security reviews fast and accessible for solo developers and small teams — without needing to be a security expert.
Right now:
• It’s free while we’re in early stages
• Feedback reports are emailed manually after scanning
• You can see a sample report to know what to expect
Try it here: https://circuit.sh/
We just launched an early version of Circuit — a lightweight tool that helps vibe coders, citizen developers, and indie hackers run fast security scans focused on the OWASP Top 10 vulnerabilities and get practical fixes.
The problem we noticed: A lot of projects being built in no-code/low-code environments (Replit, Lovable, V0, Bubble, etc.) ship quickly but rarely get security reviewed. Even small apps often expose APIs, misconfigure auth, or leak secrets without realizing it.
With Circuit, you can: • Submit your app URL • Get a security report checking OWASP Top 10 vulnerabilities • Get suggested fixes for the issues found (not just a scary list)
We’re aiming to make security reviews fast and accessible for solo developers and small teams — without needing to be a security expert.
Right now: • It’s free while we’re in early stages • Feedback reports are emailed manually after scanning • You can see a sample report to know what to expect
Try it here: https://circuit.sh/