If you saw vibeliq-scanner/1.0 (+https://vibeliq.com/bot) in your server logs, someone pasted your URL into vibeliq to check it for legal and security problems. Usually that someone is you or a teammate.
What it does
- Loads your homepage once, like a normal visitor, and reads the response headers.
- Requests a short, fixed list of well-known paths such as
/robots.txt,/sitemap.xml,/.well-known/security.txt,/.envand/.git/config, to see whether anything private is exposed. - Makes a few dozen requests in total, all plain GETs, finished within 45 seconds. It never logs in, submits forms, or runs your JavaScript.
What it keeps
Only the report: the findings, the score and the URL. We never store your pages, and any secret we spot is masked before the report is saved.
How to block it
Block the user agent vibeliq-scanner at your firewall or CDN and every scan of your site will simply fail. If something looks wrong, email hello@vibeliq.com and a human will look.