VIPE
Sign in
VS Code extension

Vipe for VS Code

Vipe catches security holes (hardcoded secrets, SQL injection, missing auth) and build-breaking mistakes (broken imports, duplicate functions, dead code) while you write — free, and entirely on your machine. The build ones it fixes for you in one click, also free: no AI, no limit, no Pro. For security findings, Vipe Pro writes the fix and explains the risk.

Install for VS CodeComing soon

The extension isn't published yet. This page links to the VS Code Marketplace and Open VSX on launch day.

server.tsVipe · 1 issue
import Stripe from 'stripe'
import express from 'express'
const app = express()
const stripe = new Stripe('sk_live_51H…Xq9')
CriticalHardcoded secret

A live Stripe key is in your source — anyone with the repo can use it.

− new Stripe('sk_live_51H…Xq9')
+ new Stripe(process.env.STRIPE_SECRET_KEY)
Suggested by Vipe ProApply fix
app.post('/checkout', async (req, res) => {

How it works

Detection and build fixes are local and free. Security fixes are one click.

Free forever

Flags issues as you code

The same 10 checks as the web scanner run inside your editor: 7 security checks (hardcoded secrets, SQL injection, missing auth and more) and 3 build checks (broken imports, duplicate functions, dead code).

Build: freeSecurity: Pro

Fixes them in one click

Build issues are fixed instantly — free, offline, no AI, no limit — wherever a safe mechanical fix exists. For security findings, Vipe Pro rewrites the flagged lines, shows you the diff, and explains the risk in plain English.

Private

Your code stays yours

Detection and build fixes never leave your machine. An AI fix sends only the handful of lines around the finding, and nothing is stored.

Pricing

Free for build issues. Pro for AI security fixes.

Detection is free forever, and so are the one-click fixes for build issues — no AI, no limit, no Pro. Vipe Pro is $12 a month for AI fixes to security findings, and your first 5 are on us.

Free

Everything you need to catch problems early.

$0forever
  • Real-time detection of all 10 issue types
  • Build issues (broken imports, duplicate functions, dead code): found and fixed in one click — free, no AI, no limit
  • Detection and build fixes run locally — no account needed
  • 5 AI security fixes to try, with a GitHub sign-in
Coming soon
Recommended

Pro

For when you want the fix written for you.

$12per month
  • Everything in Free
  • AI fixes for every security finding
  • A plain-English explanation with each fix
  • Cancel anytime — Pro runs to the end of the paid month

Prices in USD · Secure checkout via Stripe · Manage or cancel anytime from your account

Questions

Good to know

Does my code leave my machine?

Not for detection or build fixes — those run inside your editor. When you ask for an AI fix to a security finding, the few lines around it are sent to Vipe and to our AI provider, Anthropic, to write the fix. They are not stored.

Do build issues need Pro?

No — neither finding them nor fixing them. Broken imports, duplicate functions and dead code are handled by fixed rules with no AI involved, so they cost nothing to provide: they are free for everyone, signed in or not, with no usage limit, and they never count toward your free AI fixes. Pro is for AI fixes to the seven security checks.

Which build issues get a one-click fix?

The ones with a safe, mechanical fix: an import that is never used, an import path that is one typo away from a single real file, a name that is one typo away from a single real export, and a name or route declared twice in the same file. Anything that needs a judgement call — code that only looks unused, or a duplicate across files — is flagged but left for you to decide. Every fix is a normal edit you can undo with Ctrl+Z.

What counts as one of my 5 free fixes?

An AI fix for a security finding that comes back with a change you can apply. If Vipe can't produce one, it isn't counted.

How do I cancel Pro?

From your account→ Manage subscription. You keep Pro until the end of the month you've paid for, and you won't be charged again.

Does it work in Cursor, Windsurf or VSCodium?

Yes. Install it from Open VSX; signing in works the same way in every editor.