If you want to automate security audits for your no-code Bubble.io app, Flusk is a great choice. It's a security and monitoring service with automated security audits, real-time email notifications, error monitoring and log visualization. Flusk checks more than 20 Bubble-specific security settings and has tiered pricing for small teams and enterprises, including a free plan for light use.
Another tool worth mentioning is Metabob, an AI-powered coding assistant that uses graph-attention networks and generative AI for code review, refactoring and debugging. Although its focus is on improving software security and quality, it could also help you find and fix security vulnerabilities in your Bubble.io app.
For a more advanced penetration testing service, check out Beagle Security. It offers AI-powered, comprehensive penetration tests for web apps, APIs and GraphQL endpoints, producing detailed reports with remediation advice. It's good for scheduled and on-demand security testing, so it's a good choice if you want to ensure your app is secure and compliant.
Last, DryRun Security gives developers real-time security context as they write code with an AI-powered Security Buddy that analyzes code in context. It evaluates pull requests and offers fast and accurate security code reviews, which can speed up your development workflow.