CybeDefend

npx add-mcp 'https://mcp-us.cybedefend.com/mcp'

We use analytics and ad-measurement cookies (Google, Meta). Nothing is sold, and you can decline.

DeclineAccept

Got a question? Write to us

VibeDefend

Find, Fix, Repeat.Secure your Claude CodeCursorWindsurfCopilotCodexClaude CodeNo flaws, no bill.

VibeDefend wires your coding agent to CybeDefend in one command. Business rules mined from the way you code.

Install in 5 secondsNode 18.17+

$npx -y @cybedefend/vibedefend@latest installCopy

Auto-detects

• Claude Code
• Cursor
• OpenAI Codex
• Windsurf
• VS Code Copilot

Sign in to the platform

The coding agents we wire into

Run the installer once; it auto-detects every agent on your laptop and wires the ones you pick.

!Why flaws ship

Your agent writes the line. Nobody reads it.

Thousands of lines a day. No review catches the flaw.

Shipped with the flaw

Claude CodeAgent session, alone

✳Thinking ...

Update ( src/db/users.repo.ts )

+db . query('SELECT * FROM users WHERE id = ' + id)

✓Tests passing

✓Opening pull request #482

» auto modeVibeDefend: off

A rules file does not fix it.

The rule was in its file, exact. The agent broke it anyway.

M06 · LOY-01Loyalty pointsThe rule was in its file

The company ruleOne loyalty point per euro paid in money. None on the gift-card share.

ViolatedA rules file

What VibeDefend changes

Two minutes to install.

One command. It detects every agent on your machine.

**$**npx -y @cybedefend/vibedefend@latest install

_✓Claude Code✓Cursor✓Windsurf✓GitHub Copilot✓_OpenAI Codex

Your rules arrive at the line.

Mined from your code, plus OWASP, SOC 2, GDPR, ISO 27001.

Claude Code↔VibeDefend

vibedefend . business-rules.inject

tenant scopingsoft-deleteaudit-on-write

vibedefend . security-rules.inject

OWASPSOC 2GDPRISO 27001

✳Thinking ...

Update ( src/db/users.repo.ts )

+db . query('SELECT * FROM users WHERE id = ' + id)

vibedefend . scan.diff

Code AnalysisIaCSecrets

⚠new finding in diff → SQL Injection

» auto modeVibeDefend active

Scanned before the pull request.

One finding, with its fix. The agent rewrites the line.

src/db/users.repo.tsdiff scanned in the session

**-**db.query('SELECT * FROM users WHERE id = ' + id)

**+**db.query('SELECT * FROM users WHERE id = $1', [id])

⚠SQL Injection, fixed at the line it edited

✓Rule LOY-01 applied exactly

Dangerous commands never run.

A schema drop, a destructive sudo. Stopped before they fire.

Agent session · guarded

$sudo rm -rf /etc/

BLOCKEDdestructive sudo outside the project· no-destructive-sudo

$DROP SCHEMA public CASCADE

BLOCKEDschema drop against a live database· no-destructive-sql

$requests-toolbelt-async

BLOCKEDpackage does not exist on the registry· package does not exist

Every finding, live in the session.

One dashboard for your team. The same list, inside the agent.

5 false positives removed

Every finding, with its fixThe agent reads this list live

✓What you get

Four scenes, recorded.

Real Claude Code sessions with VibeDefend in the loop. Pick one.

Rules, then a scanYour rules arrive with the prompt; the diff is scanned before the pull request.The secret guardThe agent reaches for .env; the read is refused and the managed reference suggested.Protected pathsA cleanup reaches the user uploads; the command never runs.The unsafe deleteDELETE without WHERE, 8,932 rows: stopped, scoped, dry-run.

Claude Code↔VibeDefend

↺

>Add an endpoint to update user profile

>

»auto modevibedefend active·guard on

Four bricks, one install.

What runs inside the agent once the command has run.

Rules

Business rules mined from your code, plus OWASP, SOC 2, GDPR and ISO 27001, injected with the prompt.

vibedefend · rules.inject

tenant scopingsoft-deleteaudit-on-writeno-raw-amount-math

OWASPSOC 2GDPRISO 27001

Secret guard

Raw secret reads are refused; the agent gets the managed reference instead.

vibedefend · action.guard

**$cat .env | grep STRIPE⊘blocked raw secret read (.env) · logged to audit→**reference process.env.STRIPE_WEBHOOK_SECRET

**$constructEvent(body, sig, process.env.STRIPE_WEBHOOK_SECRET)✓**npm test -- webhooks · 4 passed

Action guard

Destructive commands, schema drops, protected paths: stopped before they fire, logged to the audit trail.

vibedefend · action.guard

**$rm -rf ./storage/uploads⊘**protected path · outside allowed scope

**$DELETE FROM sessions⊘**no WHERE · 8,932 rows · logged to audit

Live findings

Every scanner, unified. The agent reads the full findings list live and fixes in the loop.

vibedefend · findings.list

• SASTSQL injection · users.repo.ts:42 · reachable
• SCAlodash 4.17.20 · CVE-2021-23337
• secretsAWS access key · config/prod.yml
• IaCS3 bucket public-read · main.tf
• CI/CDpull_request_target · .github/workflows/deploy.yml

in the agent's context · live

What scanners never see

Eight flaws, stopped before the first save.

43% of API vulnerabilities exploit business logic, not CVEs (Wallarm, 2026). No scanner catches them.

Missing business ruleCaught at agent-time

CWE-639Multi-tenant leakMissing business rule tenant scoping on queriesClaude Code

Claude Codebefore

1// GET /api/orders/:id_2_const order = await db.order.findUnique({3 where: { id: req.params.id },4});_5_return res.json(order);

VibeDefendafter↺

1// GET /api/orders/:id_2_const order = await db.order.findUnique({3 where: { id: req.params.id, tenantId: req.user.tenantId },4});_5_if (!order) return res.status(404).end();_6_return res.json(order);

⚠Lookup by id with no tenant filter: any signed-in customer can read this order.

✓Caught at agent-time · Claude Code

CWE-840Refund bypassMissing business rule authorization ceiling on refundsCursor

CWE-837Missing idempotencyMissing business rule idempotency key on webhooksWindsurf

CWE-532PII in logsMissing business rule PII policy in logsGitHub Copilot

CWE-306Auth middleware skippedMissing business rule mandatory auth middleware on routesOpenAI Codex

CWE-1188Feature flag rolloutMissing business rule secure feature-flag defaultsGitHub Copilot

CWE-307Rate limit absentMissing business rule rate limiting on loginClaude Code

CWE-285Tenant-wide exportMissing business rule tenant scoping on admin exportsOpenAI Codex

Behind VibeDefend, a whole platform.

What you install in the agent runs on the full CybeDefend platform: dashboard, scanners, policies, reports and AutoFix, for the whole team.

VibeDefendin your agentThe CybeDefend platformDashboardScannersPoliciesReportsAutoFixSee the full platform

Trust and compliance

Built to be trusted with your code.

GDPRCompliant

Compliance is effective today. EU customers run on SecNumCloud-qualified infrastructure.

SOC 2 Type IIControls in placeAudit under way

Our controls meet the criteria and the audit is under way. The attestation ships under NDA the day it is issued.

Trust Center

Your code stays in your regionEU in Paris, US in Iowa

The guard decides locally. Analysis stays in your region, on our own models, and never trains one.

Partners, programs and investors

Built by experts

Jason LeeFormer CISO, Zoom and Splunk. Virtual CISO at F5.

Twenty years at the top of security, from thirteen years at Microsoft to SVP Security Operations at Salesforce. He joined the board in September 2026.

Florentin LedyCo-founder, Ops & Tech at CybeDefend

He ran the controlled study and published all of it, including the six cases where the layer did not deliver.

Read the study and reproduce it

Start free

Free to start. The whole platform.

No card, no time limit.

€0no card

• 10 static scans
• 50 AI credits
• Access to the whole platform
• Your first scan unlocks the promo code Install free

Prefer to see it on your repo first?

Twenty minutes with a founder, on your repo.

Book a demoRead the study and reproduce it36 pages, 90 transcripts, blind audits.

How it works,

in detail.

The documentation walks you through setup, configuration and every option.

Read the docs

docs.cybedefend.com/latest/agent-ai-integration/vibedefend

Agent & AI IntegrationVibeDefend, one command to wire every agent

Agent & AI Integration

VibeDefend, one command to wire every agent

The one-command install, the MCP server and hooks, linking a project, every command, tunables and troubleshooting.

bash

$ npx -y @cybedefend/vibedefend@latest install

Questions

Before you install.

Does my code leave my machine?

What you send for analysis does, and it stays in the region you picked at install: Paris for EU customers on SecNumCloud-qualified infrastructure, Iowa for US customers, on our own self-hosted models, never a third-party AI API. The guard decides on your machine, its telemetry carries metadata only (no prompt content, no raw code), findings never cross regions, and your code is never used to train a model.

Which agents does it work with?

The installer wires Claude Code, Cursor, Windsurf, GitHub Copilot and Codex. Any other agent that speaks MCP works in bring-your-own-config mode, including Gemini CLI, Cline, Continue.dev and Zed.

What does the free plan include, and what happens after?

50 AI credits and 10 static scans, with access to the whole platform, no card and no time limit. Run your first scan and we mail you a promo code. When you need more, the Developer plan starts at €19 or $21 a month.

Is this another scanner that floods the agent with alerts?

No. Legacy scanners run on commits and bury you in false positives. VibeDefend runs at agent-time on the diff being written, with reachability and framework awareness, and hands the agent one finding it can act on, with the fix.

Can I read the study before I sign up?

Yes, and you should. The 36-page paper, the 90 transcripts, the blind audits and the six cases where the layer did not deliver are in the public repository linked on this page.

Nobody told your agent. Now it knows.

One command. Two minutes. No card.

Install free

Install VibeDefend in 5 seconds.

One command wires every coding agent on your machine to CybeDefend: your business rules, your compliance frameworks, and guards that block destructive calls before they fire.

Install in 5 secondsNode 18.17+

$npx -y @cybedefend/vibedefend@latest installCopy

Auto-detects

• Claude Code
• Cursor
• OpenAI Codex
• Windsurf
• VS Code Copilot

Sign in to the platform

{"@context":"https://schema.org","@type":"Organization","@id":"https://www.cybedefend.com/#organization","name":"CybeDefend","legalName":"CybeDefend SAS","alternateName":["VibeDefend","Cybedefend","Cybe Defend","Cybe-Defend","cybedefend"],"url":"https://www.cybedefend.com","logo":{"@type":"ImageObject","url":"https://www.cybedefend.com/brand/cybedefend-logo-white.svg","width":"512","height":"512","caption":"CybeDefend logo"},"image":"https://www.cybedefend.com/api/og?locale=en","description":"Agent-time application security for AI coding agents. CybeDefend enforces your security policy inside Claude Code, Cursor, Windsurf, GitHub Copilot, Gemini, Cline, Continue and Zed. VibeDefend, our agent-time guard, learns your business-logic rules on the first scan and reviews every prompt in real time. Logic flaws and vulnerabilities caught before the pull request exists. Reachability-aware SAST, SCA, IaC, container, CI/CD and secret detection unified in a single Security Code Knowledge Graph.","slogan":"Find, Fix, Repeat. Secure your Coding Agent.","keywords":"AppSec, Application Security, VibeDefend, agent-time security, MCP, Model Context Protocol, AI coding agents, Claude Code, Cursor, Windsurf, GitHub Copilot, Gemini, Cline, Continue, Zed, SAST, SCA, IaC, Container Security, CI/CD Security, Secret Detection, logic flaws, shift-left, VibeSec, DevSecOps, secure code generation, AI code review","email":"contact@cybedefend.com","foundingDate":"2025-01","founders":[{"@type":"Person","name":"Julien Zammit"},{"@type":"Person","name":"Florentin Ledy"},{"@type":"Person","name":"Axel Paulin"}],"member":[{"@type":"Person","name":"Jason Lee","jobTitle":"Board Advisor"}],"address":{"@type":"PostalAddress","streetAddress":"177 Allée Clémentine Deman","addressLocality":"Lille","postalCode":"59000","addressCountry":"FR"},"location":[{"@type":"Place","name":"CybeDefend HQ, Lille","address":{"@type":"PostalAddress","streetAddress":"177 Allée Clémentine Deman","addressLocality":"Lille","postalCode":"59000","addressCountry":"FR"}},{"@type":"Place","name":"CybeDefend US, Seattle","address":{"@type":"PostalAddress","addressLocality":"Seattle","addressRegion":"WA","addressCountry":"US"}}],"sameAs":["https://www.linkedin.com/company/cybedefend","https://github.com/orgs/CybeDefend","https://x.com/cybedefend","https://discord.gg/UPzm4n6SAJ","https://www.instagram.com/cybedefend","https://www.facebook.com/people/CybeDefend/61591518974126/","https://www.tiktok.com/@cybedefend"],"knowsAbout":["Application Security","AI-assisted code generation","Static Application Security Testing (SAST)","Software Composition Analysis (SCA)","Infrastructure as Code security","Container and image security","CI/CD pipeline security","Secret detection and management","Model Context Protocol (MCP)","DevSecOps","Logic flaw detection"],"areaServed":[{"@type":"AdministrativeArea","name":"European Union"},{"@type":"Country","name":"United States"},{"@type":"Place","name":"Worldwide"}],"contactPoint":[{"@type":"ContactPoint","email":"contact@cybedefend.com","contactType":"customer support","availableLanguage":["English","French","Spanish","Portuguese","Italian","German"],"areaServed":["EU","US","Worldwide"]},{"@type":"ContactPoint","email":"security@cybedefend.com","contactType":"security","availableLanguage":["English","French"]},{"@type":"ContactPoint","email":"press@cybedefend.com","contactType":"press inquiry","availableLanguage":["English","French"]}],"hasOfferCatalog":{"@type":"OfferCatalog","name":"CybeDefend products and services","itemListElement":[{"@type":"Offer","itemOffered":{"@type":"Service","name":"VibeDefend","url":"https://www.cybedefend.com/en/vibedefend","description":"Agent-time guard that distributes security and business-logic rules into every AI coding agent: Claude Code, Cursor, Windsurf, GitHub Copilot, Gemini, Cline, Continue and Zed."}},{"@type":"Offer","itemOffered":{"@type":"Service","name":"AI-BOM","url":"https://www.cybedefend.com/en/ai-bom","description":"AI component inventory aligned with EU AI Act and NIST AI RMF. Discovers every model, prompt path and AI library shipped in your codebase."}},{"@type":"Offer","itemOffered":{"@type":"Service","name":"Cybe Security Champion","url":"https://www.cybedefend.com/en/cybe-security-champion","description":"AI security copilot in your IDE (VS Code, JetBrains, Zed) with knowledge-graph reachability context."}},{"@type":"Offer","itemOffered":{"@type":"Service","name":"Cybe AutoFix","url":"https://www.cybedefend.com/en/cybe-autofix","description":"Autonomous AI agent that generates verified vulnerability fixes and opens ready-to-merge pull requests."}},{"@type":"Offer","itemOffered":{"@type":"Service","name":"Cybe Analysis","url":"https://www.cybedefend.com/en/cybe-analysis","description":"Autonomous AI agent for vulnerability triage with reachability scoring and exploit-path ranking."}},{"@type":"Offer","itemOffered":{"@type":"Service","name":"CybeDefend Platform","url":"https://www.cybedefend.com/en/platform","description":"Unified Security Code Knowledge Graph integrating SAST, SCA, IaC, container, CI/CD and secret detection with reachability-aware analysis."}}]}}
{"@context":"https://schema.org","@type":"LocalBusiness","@id":"https://www.cybedefend.com/#local-business","name":"CybeDefend SAS","url":"https://www.cybedefend.com","email":"contact@cybedefend.com","image":"https://www.cybedefend.com/brand/cybedefend-logo-white.svg","description":"Agent-time application security for AI coding agents. CybeDefend enforces your security policy inside Claude Code, Cursor, Windsurf, GitHub Copilot, Gemini, Cline, Continue and Zed. VibeDefend, our agent-time guard, learns your business-logic rules on the first scan and reviews every prompt in real time. Logic flaws and vulnerabilities caught before the pull request exists. Reachability-aware SAST, SCA, IaC, container, CI/CD and secret detection unified in a single Security Code Knowledge Graph.","address":{"@type":"PostalAddress","streetAddress":"177 Allée Clémentine Deman","addressLocality":"Lille","postalCode":"59000","addressCountry":"FR","addressRegion":"Hauts-de-France"},"geo":{"@type":"GeoCoordinates","latitude":50.6293,"longitude":3.0573},"parentOrganization":{"@id":"https://www.cybedefend.com/#organization"},"sameAs":["https://www.linkedin.com/company/cybedefend","https://github.com/orgs/CybeDefend","https://x.com/cybedefend","https://discord.gg/UPzm4n6SAJ","https://www.instagram.com/cybedefend","https://www.facebook.com/people/CybeDefend/61591518974126/","https://www.tiktok.com/@cybedefend"],"openingHoursSpecification":{"@type":"OpeningHoursSpecification","dayOfWeek":["Monday","Tuesday","Wednesday","Thursday","Friday"],"opens":"09:00","closes":"19:00"}}
{"@context":"https://schema.org","@type":"WebSite","@id":"https://www.cybedefend.com/#website","url":"https://www.cybedefend.com/en","name":"CybeDefend","alternateName":"Agent-time AppSec for AI coding agents","inLanguage":"en-US","description":"Agent-time application security for AI coding agents. CybeDefend enforces your security policy inside Claude Code, Cursor, Windsurf, GitHub Copilot, Gemini, Cline, Continue and Zed. VibeDefend, our agent-time guard, learns your business-logic rules on the first scan and reviews every prompt in real time. Logic flaws and vulnerabilities caught before the pull request exists. Reachability-aware SAST, SCA, IaC, container, CI/CD and secret detection unified in a single Security Code Knowledge Graph.","keywords":"AppSec, Application Security, VibeDefend, agent-time security, MCP, Model Context Protocol, AI coding agents, Claude Code, Cursor, Windsurf, GitHub Copilot, Gemini, Cline, Continue, Zed, SAST, SCA, IaC, Container Security, CI/CD Security, Secret Detection, logic flaws, shift-left, VibeSec, DevSecOps, secure code generation, AI code review","publisher":{"@id":"https://www.cybedefend.com/#organization"},"copyrightHolder":{"@id":"https://www.cybedefend.com/#organization"},"copyrightYear":2026,"isAccessibleForFree":true}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"CybeDefend","item":"https://www.cybedefend.com/en"},{"@type":"ListItem","position":2,"name":"VibeDefend","item":"https://www.cybedefend.com/en/vibedefend"}]}
{"@context":"https://schema.org","@type":"SoftwareApplication","@id":"https://www.cybedefend.com/en/vibedefend#software","name":"VibeDefend","alternateName":"Repeat","applicationCategory":"SecurityApplication","applicationSubCategory":"DeveloperSecurity","operatingSystem":"CLI · MCP server (stdio + HTTP) · Claude Code · Cursor · Windsurf · Antigravity · Gemini CLI · GitHub Copilot · Cline · Continue · Zed","description":"One npm command puts VibeDefend inside Claude Code, Cursor, Windsurf, Copilot and Codex: security and business rules in every prompt, dangerous commands stopped.","url":"https://www.cybedefend.com/en/vibedefend","image":"https://www.cybedefend.com/api/og?locale=en&page=vibedefend","keywords":"VibeDefend, AI coding agent governance, MCP server, Claude Code MCP, Cursor MCP, Codex MCP, Windsurf MCP, VS Code Copilot MCP, business rules, security rules, action guards, AI guardrails, agent audit trail","softwareVersion":"2026.05","author":{"@type":"Organization","@id":"https://www.cybedefend.com/#organization"},"publisher":{"@type":"Organization","@id":"https://www.cybedefend.com/#organization"},"offers":{"@type":"Offer","price":"0","priceCurrency":"USD","url":"https://www.cybedefend.com/en/pricing","availability":"https://schema.org/InStock","eligibleRegion":[{"@type":"Place","name":"European Union"},{"@type":"Place","name":"United States"}]},"featureList":["Learns the business-logic rules your codebase already enforces on the first scan","Reviews every prompt the AI coding agent receives in real time","Continuous rule learning every few prompts, autopilot or manual","Memory that holds across long sessions and conversation resets","Native on Claude Code, Cursor, Windsurf, GitHub Copilot, OpenAI Codex, Gemini, Cline, Continue, Zed and Antigravity","EU and US data residency with per-tenant isolation","Audit trail signed with the agent identity for every decision","Deep installer for five agents, open MCP protocol for every other compatible client"]}
{"@context":"https://schema.org","@type":"Service","name":"VibeDefend · CybeDefend","description":"One npm command puts VibeDefend inside Claude Code, Cursor, Windsurf, Copilot and Codex: security and business rules in every prompt, dangerous commands stopped.","url":"https://www.cybedefend.com/en/vibedefend","serviceType":"Agent-time application security · real-time prompt review · continuous business-logic rule learning","provider":{"@id":"https://www.cybedefend.com/#organization"},"areaServed":[{"@type":"AdministrativeArea","name":"European Union"},{"@type":"Country","name":"United States"},{"@type":"Place","name":"Worldwide"}],"audience":{"@type":"Audience","audienceType":"Software developers, AppSec engineers, platform teams, CISOs"},"category":"Cybersecurity / Application Security","isRelatedTo":{"@id":"https://www.cybedefend.com/#software"},"offers":{"@type":"Offer","url":"https://www.cybedefend.com/pricing","availability":"https://schema.org/InStock"},"keywords":"VibeDefend, AI coding agent governance, MCP server, Claude Code MCP, Cursor MCP, Codex MCP, Windsurf MCP, VS Code Copilot MCP, business rules, security rules, action guards, AI guardrails, agent audit trail"}
{"@context":"https://schema.org","@type":"FAQPage","mainEntity":[{"@type":"Question","name":"Does my code leave my machine?","acceptedAnswer":{"@type":"Answer","text":"What you send for analysis does, and it stays in the region you picked at install: Paris for EU customers on SecNumCloud-qualified infrastructure, Iowa for US customers, on our own self-hosted models, never a third-party AI API. The guard decides on your machine, its telemetry carries metadata only (no prompt content, no raw code), findings never cross regions, and your code is never used to train a model."}},{"@type":"Question","name":"Which agents does it work with?","acceptedAnswer":{"@type":"Answer","text":"The installer wires Claude Code, Cursor, Windsurf, GitHub Copilot and Codex. Any other agent that speaks MCP works in bring-your-own-config mode, including Gemini CLI, Cline, Continue.dev and Zed."}},{"@type":"Question","name":"What does the free plan include, and what happens after?","acceptedAnswer":{"@type":"Answer","text":"50 AI credits and 10 static scans, with access to the whole platform, no card and no time limit. Run your first scan and we mail you a promo code. When you need more, the Developer plan starts at €19 or $21 a month."}},{"@type":"Question","name":"Is this another scanner that floods the agent with alerts?","acceptedAnswer":{"@type":"Answer","text":"No. Legacy scanners run on commits and bury you in false positives. VibeDefend runs at agent-time on the diff being written, with reachability and framework awareness, and hands the agent one finding it can act on, with the fix."}},{"@type":"Question","name":"Can I read the study before I sign up?","acceptedAnswer":{"@type":"Answer","text":"Yes, and you should. The 36-page paper, the 90 transcripts, the blind audits and the six cases where the layer did not deliver are in the public repository linked on this page."}}]}