Security monitoring for vibe-coded web apps

Turn one public URL into a launch-readiness report: exposed files, weak headers, CORS, cookies, source maps, client bundle leaks, and AI repair prompts.