Free tools
Free security checkers for AI-built apps
Quick, passive checks for the problems we see most in apps made with Lovable, Bolt, Replit, Cursor and v0. No signup, no email. Each one only reads the public URL you enter.
Security headers checker
Check CSP, HSTS, X-Frame-Options and more in one request.
Open the security headers checkerExposed API key checker
Scan your public JavaScript bundles for leaked secret keys.
Open the exposed api key checkerSupabase RLS checker
See whether your Supabase anon key exposes your database schema.
Open the supabase rls checker.env file checker
Check for exposed .env files, .git folders and source maps.
Open the .env file checker
Want everything at once?
The free full scan runs all of these checks plus SEO and performance, and gives your app a score.
Run a free scan