Security has always been an after thought, especially with the current vibecoding trend. I have spent the past year working on an autonomous pentest agent for vibe coded apps, now you do not need to wait for days or spend thousands to get your app audited. I have used the agent to detect vulnerabilities in large production systems and have been able to get over 15 CVEs in the process. some examples below

CVE-2025-58434 (9.8/10) - Flowise Full Account take over

CVE-2025-61622 (9.8/10) - Apache Pyfory RCE

A lot more pending CVEs.

Right now the service is currently in beta stage, I am currently seeking feedback and its free for anyone to pentest there vibe coded app

The URL is: bugbunny.ai

Please let me know what you think if you find it useful.