| What it does | Security scanner that shows what strangers can read from your deployed app
| Real-time fraud scoring API for IP addresses, email addresses and phone numbers
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | CA
| Not given
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Free scan available once per network every 30 days. Proof Report: $19 once per scan. Monitoring: $9/month for weekly rescans of one app. Pro: $29/month for up to 10 apps with reports unlocked and GitHub code scanning.
| Starter: $40 for 5,000 credits ($0.0080 per check); Growth: $140 for 20,000 credits ($0.0070 per check); Scale: $300 for 50,000 credits ($0.0060 per check); Bulk: $1,000 for 200,000 credits ($0.0050 per check). Start with 25 free credits.
|
|---|
| Key features | - Detects exposed API keys and secrets from OpenAI, Anthropic, Stripe, AWS, Google, GitHub, SendGrid, Resend, Slack, Twilio, Firebase, and private keys
- Checks Supabase with RLS disabled to detect readable tables
- Scans for exposed environment files (.env, .env.local, .git/config, source maps)
- Tests Firebase Realtime Database and Firestore rules for open access
- Audits security headers and CORS configuration
- Monitors certificate expiry status on HTTPS sites
- GitHub repository scanning for Pro users to detect secrets in commit history
- Weekly rescans and instant alerts when new vulnerabilities appear
- Fix prompts compatible with Lovable, Bolt, Cursor, Claude Code, v0, and Replit
- Masked secrets in reports showing only first and last four characters
| - Proxy, VPN and Tor detection with active status indicators
- Recent abuse and bot traffic detection
- Email disposable domain and deliverability checks
- Phone carrier, line type and VOIP risk assessment
- Network and location context (ISP, ASN, country, region, city)
- Sub-second API response times
- Batch checking up to 100 addresses per request
- IPv4 and IPv6 support
- Bearer token authentication with per-key rate limits
|
|---|
| What makes it different | - Read-only scanning with no code access, form submissions, or database writes
- Built specifically for AI-generated apps from Lovable, Bolt, Cursor, Replit, and Supabase
- Full refund if any finding marked serious turns out not to be real within 14 days
- One-time payment for Proof Report with no subscription required
| - Prepaid credit model with no subscriptions or monthly minimums
- 25 free credits with email verification, no card required
- Free /my-ip endpoint for testing integration before spending credits
- Pay by card or cryptocurrency (USDT)
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | Not checked yet ● no change since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 0 | 0 |
|---|
| Citation Flow (Majestic) | 0 | 12 |
|---|
| Referring domains (Majestic) | 0 | 2 |
|---|
FraudNova