CheckVibeCodeCheckVibeCode
Checks/Infrastructure
InfrastructureHeuristic — capped burst2 checks

Mobile API Rate Limiting Scanner

Check API endpoints for proper rate limiting and abuse prevention on mobile-facing APIs.

Run this scanSee pricing

How this scan works

  • Sends a small, spaced burst (≤10 requests, 200ms apart) to detected /api/* routes
  • Checks for a 429/Retry-After response or a sliding-window signal in response headers
  • Flags a complete absence of any throttling signal after the burst
  • Capped and backs off immediately on the first 429 — never sustained load

More checks in Infrastructure

DNS & Email Security ScannerDDoS Protection ScannerDomain Hijacking DetectionVercel Hosting Security ScannerNetlify Hosting Security ScannerCloudflare Security Scanner