← ALL DOCS

TRUST BADGE

A badge that tells visitors your app was actually tested — backed by a live scan, not a static image. It updates automatically and can be revoked if your score rises.

Eligibility

  • The most recent completed scan of the target has a risk score of 15 or lower.
  • Your organization does not already hold a badge (one per organization).

Otherwise the claim is rejected with not eligible or badge limit.

Claiming

On a qualifying scan page, the On-call review card shows a Trust badge button. The dialog confirms: “This scan passed with a low risk score, so qualifies for a verified badge.” Claim it, then pick a style and copy an embed snippet.

Styles

Four styles, selectable in the dialog and via the ?style= query parameter:

UI label style value
Filled filled (default)
Border border
Light transparent
Dark transparent-dark

The badge is a live SVG served from a public URL, so it works in any HTML page or README without authentication.

Embed snippets

The claim dialog gives you two ready-made snippets with Copy buttons:

  • HTML (site footer) — an <a> linking to vibe-eval.com wrapping an <img> of the badge at 28px height with alt text Scanned by VibeEval.
  • README (auto light/dark) — a <picture> element that swaps to the dark-transparent style under prefers-color-scheme: dark and the light-transparent style otherwise.

Paste either one where you want the badge to appear. The image URL is tied to your target’s domain exactly as registered, so claim the badge for the domain you actually serve.

Keeping it live

The badge reflects the latest completed scan. Re-run scans after deploys so it stays current; if a later scan pushes the score above the threshold the badge still renders but reflects the new state, and you can revoke it from the same dialog.

COMMON QUESTIONS

01
What qualifies for a badge?
A completed scan of the target with a risk score of 15 or lower. Each organization can hold one badge at a time.
Q&A
02
What is the difference between Scanned and Secured tiers?
Scanned is the default tier. Secured is shown for organizations with an active subscription, signalling ongoing coverage rather than a one-off pass.
Q&A
03
Does the badge expose my findings?
No. The badge is an SVG showing the tier and status. It links to vibe-eval.com. A public per-domain verification page with the score and severity counts is planned but not yet live.
Q&A

SEE IT ON YOUR OWN APP

Docs explain the product. A scan shows you what it finds on your deployed URL — keys, RLS, auth, and API gaps in under 60 seconds.

14-day free trial · No credit card · Cancel anytime

START FREE SCAN