Security · checked 2026-10-20Can I vibecode Aura?
NOT REALLY· don't bother
Most of what Aura sells isn't software. Credit-file alerts come from data the three bureaus license, the insurance is a policy underwritten by an insurer, and fraud resolution is a team on the phone. The software parts, a VPN, antivirus, password manager and data-broker removal, exist as separate products, and some are free. What an agent can build is a personal checklist: a breach and leaked-password checker, reminders for credit freezes and free credit reports, and a list of old accounts to close. That is a to-do list around the real protection, not a substitute for it.
$15/moprice
$180it costs you a year
one sittingbuild time
—people replaced it
What you need on hand.
DifficultyBeginner · No setup beyond your agent.
TimeOne evening
- Claude Code, Codex or CursorAny of them can run the prompt.
- Python 3.12No native build tools are needed.
- A Have I Been Pwned API key (optional)Needed for email breach lookups; leaked-password checks work without it.
- A password manager CSV exportDelete the file after the check; it contains your passwords in plain text.
Before you buildCredit freezes and weekly credit reports are free, and a freeze is the single most useful step against new accounts opened in your name. Do those before paying for anything.
- 1. Install one agent: Claude Code, Codex, Cursor.
- 2. Make an empty folder and open it in the agent.
- 3. Paste the prompt below, press enter, and answer its questions as it builds.
The prompt
Build me a personal identity-security checklist and breach monitor to replace the do-it-yourself side of Aura. Requirements: - Python 3.12 with a Typer CLI `idcheck` and a FastAPI page on http://127.0.0.1:4960 showing the same data; storage is SQLite at ./data/idcheck.db through SQLAlchemy. - Email watch: a list of my email addresses. `idcheck breaches` queries the Have I Been Pwned breached-account API with HIBP_API_KEY from .env (respect its rate limit), stores breach names and dates, and flags breaches that are new since the last run. - Password check: `idcheck passwords export.csv` reads a password-manager CSV, hashes each password with SHA-1 in memory and queries the Pwned Passwords range API with only the first 5 hash characters. It prints entry names and counts, never the passwords, and stores nothing from the file. - Offline option: if PWNED_RANGES_DIR points at ranges fetched with the official Pwned Passwords downloader, use those instead of the network. - Freeze tracker: one row per credit bureau (Equifax, Experian, TransUnion) with frozen or not, date and a note, plus a weekly reminder to review my free reports at AnnualCreditReport.com. The tool only shows links and never logs in to any bureau. - Account hygiene: a table of accounts with 2FA on or off and a 'close this' flag, filterable. - Alerts: email through `smtplib` or an ntfy topic when a new breach appears; a cron line in the README runs `idcheck breaches` weekly. - Never store SSNs, card numbers, PINs or passwords. Single user. No accounts, no telemetry, local-first. - Out of scope: credit monitoring, dark-web scanning, insurance, VPN, antivirus, anything that logs in to a bureau. - README: what this does not protect against, the FTC credit-freeze steps, and the cost of the HIBP key.
Opens your agent with the prompt filled in, you press enter. Or copy it and paste it into an empty folder.
Then keep going
Next prompts, same folder.
The first prompt builds the core. Run these one at a time in the same folder to grow it into your own Aura.
Add a monthly report to the identity checklist in this folder. Requirements: - On the first of each month, render an HTML report: new breaches per address, weak or reused password counts from the last check, freeze status per bureau and accounts flagged 'close this'. - Email it and save it to ./reports/YYYY-MM.html; keep 24 reports. - Plain inline CSS, no external fonts or scripts. - A `--now` flag for testing. - Update the README.
Add an account finder to the identity checklist in this folder. Requirements: - `idcheck inventory --mbox export.mbox` reads a mailbox export I provide (no IMAP login) and lists senders of welcome, verification and password-reset emails, grouped by domain. - Add each domain to the accounts table as 'unreviewed'; store only the domain and the first date seen, never message bodies. - A review page where I mark each as keep, close or done. - Update the README, including how to export a mailbox from common mail apps.
Add a data-broker tracker to the identity checklist in this folder. Requirements: - Import a CSV of brokers I download myself (name, site, opt-out URL, method) and track status per broker: todo, requested, confirmed, relisted, with dates and a proof note. - Compute a recheck date 90 days after confirmation and show due items on the dashboard. - Never scrape or submit forms for me; every opt-out stays a manual step. - Update the README with the California DROP portal for residents.
What you lose
- Credit monitoring across the three bureaus, with instant credit lock
- Identity theft insurance and U.S.-based fraud remediation staff
- Home and auto title monitoring and financial transaction alerts
- A bundled VPN, antivirus and password manager under one login
- Family and child protection, and AI spam call filtering
Why people still pay
When someone opens a card in your name, people want a phone number and a team that has done it before, not a dashboard they built themselves. The insurance, the credit-lock button and the single login for everything are what the monthly fee buys, and one bad incident costs far more than a year of the plan.
Aura or your own copy?
Over
Your usage
3h ×$/h
Aura, 1 yr$180
Your own copy, 1 yr$34running + build session
You keep$146pays for itself in the first month
Estimate · Runs on your own computer. The HIBP key is a paid subscription whose price we couldn't read on the pages we opened; allow a few dollars a month. The build is token usage on your agent plan.
Take your data, then cancel.
1 · Take your data out of Aura
- 1Aura bundles a password manager. We found no export guide in the pages we read, so check the app for an export option and move your passwords before you cancel.
- 2Download your credit reports while you still have access, or get them free from AnnualCreditReport.com, so you have a baseline.
- 3Write down which accounts Aura was watching, such as cards, bank accounts and the SSN-monitoring entries, so you can recreate alerts elsewhere.
- 4Uninstall the VPN and antivirus once your replacement is running, not before.
2 · Cancel Aura
- 1Cancel from your Account Membership page, or call 1-855-712-0021, the number Aura's FAQ gives for cancelling.
- 2After cancelling, the membership stops renewing but protection continues for the remaining days of your term.
- 3Annual members may qualify for the 60-day money-back guarantee: the refund policy says to cancel online and then call 1-833-552-2123 within 60 days.
- 4If you bought through the Apple App Store or Google Play, cancel in the store's subscription settings; the guarantee doesn't cover those purchases.
- Monthly plans don't qualify for the refund, and later annual renewals don't get a full refund, so cancel before the renewal date.
- Aura's FAQ and its refund policy give different phone numbers; confirm which one to use before you call.
- Place credit freezes at the three bureaus before you leave: they're free and last until you lift them.
- The free trial can be redeemed only once per customer.
The escape hatch
Don't feel like building it? These are already free.
Credit freezes (FTC guide)FreePlacing and lifting a credit freeze costs nothing; you contact Equifax, Experian and TransUnion, and it lasts until you lift it.they host it
WebVisit ↗AnnualCreditReport.comFreeThe one authorized site for free credit reports; the FTC says all three bureaus let you check weekly at no cost.they host it
WebVisit ↗Have I Been Pwned: Pwned PasswordsFreeFree leaked-password lookups that stay free and open source; email and domain lookups through the API need a paid key.they host it
WebVisit ↗
WebVisit ↗AnnualCreditReport.comFreeThe one authorized site for free credit reports; the FTC says all three bureaus let you check weekly at no cost.they host it
WebVisit ↗Have I Been Pwned: Pwned PasswordsFreeFree leaked-password lookups that stay free and open source; email and domain lookups through the API need a paid key.they host it
WebVisit ↗
The numbers
Aura pricing
| Plan | Monthly | Annual, per month | What you get |
|---|---|---|---|
| Individual | $15 | $12 | 1 adult, 10 devices, $1M identity theft insurance, 3-bureau credit monitoring, instant credit lock, home and auto title monitoring, transaction alerts, antivirus, VPN, password manager, data removal, 24/7 support with U.S.-based fraud remediation. |
| Couple | $29 | $22 | 2 adults, 20 devices, $2M identity theft insurance, the same protection features, trusted family access. |
| Family | $50 | $32 | 5 adults, unlimited kids and devices, $5M insurance, child identity protection, parental controls, AI spam call and message protection. |
| Kids | $13 | $10 | Online wellbeing overview, parental controls with site blocking and screen-time limits, safe gaming alerts. No adult identity protection. |
- Billing
- Every plan has a 14-day free trial, redeemable once per customer, and full access depends on identity verification and credit eligibility. A 60-day money-back guarantee applies only to annual plans bought directly from Aura, not to monthly plans or purchases through an app store or Amazon. Insurance is underwritten by American Bankers Insurance Company of Florida, and the page tells you to read the policy for exclusions.
- Hidden costs
- The pricing page doesn't state renewal prices; check the amount at checkout. Renewal payments on annual plans don't qualify for a full refund under the refund policy. Households with more than five adults have to call for a quote.
- Source
- www.aura.com
Also on the list
Related apps
Not really. When someone opens a card in your name, people want a phone number and a team that has done it before, not a dashboard they built themselves. The insurance, the credit-lock button and the single login for everything are what the monthly fee buys, and one bad incident costs far more than a year of the plan. The prompt on this page builds the closest honest substitute.
About $15 a month on the Individual plan, $180 a year (checked 2026-10-20).
Credit monitoring across the three bureaus, with instant credit lock; Identity theft insurance and U.S.-based fraud remediation staff; Home and auto title monitoring and financial transaction alerts; A bundled VPN, antivirus and password manager under one login; Family and child protection, and AI spam call filtering. If any of those matter to you, keep paying.
Yes: Credit freezes (FTC guide) (free), AnnualCreditReport.com (free), Have I Been Pwned: Pwned Passwords (free).