Epherem

Strong signal

Find login and database flaws in your AI-built app

Launched 8h ago

Signal

Velocity

What this means

+100%Launching in a 100% WoW growing category.

Google Cloud Run had 53 launches this week vs 0 last.

22Founder Conviction Index: 22 — low signal.

Few of the conviction sub-signals (reputation, velocity, buyer-intent, tagline clarity) are firing yet.

Prediction

Top-5 finish probability

17%

today

Projected end-of-day votes

70range 53–95

Trajectory

stable

Not enough snapshots yet to detect trajectory.

Speed vs peers

1.1×

5 comparable launches

About

Epherem is a free source code security scanner for apps built with AI. It checks for common security issues involving authentication, database access, exposed API keys and vulnerable packages. Upload a ZIP or connect a GitHub repository to scan your app. Findings include plain-English explanations, suggested fixes and prompts you can paste into Claude Code, Lovable or Cursor. Reports can also be exported for review with your AI coding assistant, including issues the scanner couldn't verify.

Attention & discussion velocity

Performance

Velocity0

Vote pace vs average

Momentum0

Sustained over 6h

Virality0

Spread × engagement

Engagement20

Discussion per unit of attention

Editorial read

Scored deterministically. Only candidates that fire a story trigger are sent to a model, so this one has no written angle.

InvestigateRanks high on little evidence. Worth a look, but verify before committing.

175/8

Timeliness5%100

carried 7%

Novelty15%61

carried 20%

Trend20%50

carried 27%

Business15%10

carried 20%

Story20%0

carried 27%

Not measured · 3 of 8

Revenue10%—

Founder10%—

Cross-platform5%—

Gaps in our data, not findings about the product. Their weight is redistributed across the 5 we did measure.

measuredmeasured, zeronot measured

Full audit →

Signal sources

2 of 6 active

Launch tracking2 readings since we picked it up
AI analysisnot yet enriched
Comment intelligencethread not yet analysed
Outside discussionnot checked — domain is a storefront or shared
Revenue signalsno match on this domain
Editorial scoring23% evidence coverage

A source that found nothing is a measurement. A source that has not run is a gap. Neither means the launch lacks the thing.