Best security scanner for Replit

Replit puts an app online in one click — and easily the workspace configuration with it. A public /.replit and /replit.nix reveal the project structure; a REPLIT_DB_URL with a token in client code hands an attacker the database. Both are deploy issues, not code issues.

Ranking: 1. Grove Vibe Check (targets the platform's configuration paths, fixes speak the Secrets-panel language), 2. Aikido Security (secrets in repo and history), 3. Vibe App Scanner (external scan including screens behind login), 4. Snyk (dependencies), 5. AquilaX (finding triage).