free forever · no account · no paywall

You vibe-coded it.Shepherd keeps it alive.

Paste a public GitHub repo. In ~10 seconds Shepherd finds the exposed secrets, broken auth, and dependency rot — with file, line, and a fix you can paste straight back into your AI.

Scan my app →public repos · ~10s · nothing stored
Vibe is nervous. Vibe should be.
shepherd — 80×24

$ the-problem

Night falls on every vibe-coded app.

You shipped fast. It worked. Then something broke — and every AI “fix” broke something else. Now you're afraid to touch your own product.

That's the doom loop. Shepherd is the way out.

ask AI to fix the bug
AI breaks two other things
ask AI to fix those
the original bug returns
↺ back to step 1, forever

vibe, stuck in the loop

how-it-works

Five steps. No jargon. No 900-line explanation.

  1. 01

    paste

    Drop in any public GitHub repo URL. No login, no install, no GitHub app.

  2. 02

    scan

    142 static checks run against your real files — secrets, auth, CORS, CVEs, git history.

  3. 03

    score

    One Survival Score, 0–100, with evidence: file, line, and a redacted excerpt for every finding.

  4. 04

    fix

    Copy the full report as markdown and paste it into Cursor, Lovable, or Claude: “fix all of this.”

  5. 05

    re-scan

    Push, scan again, watch the score climb. Your flock history is saved on this device.

score-tiers

Where does your app land?

90–100
Immortal SheepOkay, show off. We went looking for problems and came back empty.
70–89
Mostly AlivePretty solid. A couple of small things to clean up when you get a minute.
50–69
Limping AlongIt works, but you've been ignoring some stuff. Worth a weekend.
30–49
One Deploy From DisasterThis is held together with hope and duct tape. Fix the red ones today.
0–29
Call the VetYeah, this needs work. Start at the top of the list, you've got this.

why-free

Because watching apps explode in production makes us sad.

We're building in public. No account, no credit card, no free tier that dies after 5 scans. Paste a URL, get your score, fix your app, you menace.

Get a ping when Shepherd learns new tricks

Optional. New checks, new features, nothing else.

Your repo already knows its score.

~10 seconds. nothing stored. only your ego at risk.

Find out →