| What it does | Security audits and fix PRs for AI-built apps
| Security scanner that shows what strangers can read from your deployed app
|
|---|
| Stage | Startup
| Not given
|
|---|
| Founded | 2026
| Not given
|
|---|
| Based in | US
| CA
|
|---|
| Pricing model | Not given
| Freemium
|
|---|
| Pricing | Scan + Report: $99 USD one time (48-hour turnaround); Scan + Fix PR: $249 USD one time (72-hour turnaround); Launch Lockdown: $499 USD one time (5 business days); Monitor: $49 USD per month (waitlist)
| Free scan available once per network every 30 days. Proof Report: $19 once per scan. Monitoring: $9/month for weekly rescans of one app. Pro: $29/month for up to 10 apps with reports unlocked and GitHub code scanning.
|
|---|
| Key features | - Secrets in code, history & browser bundle scanning
- Supabase RLS and storage policies review
- Auth, validation and rate limits analysis
- Dependency vulnerability detection
- Automated evidence checks on findings
- Fix pull requests with build and test verification
- RLS policy migrations
- Re-scan after fixes merged
- Supports up to 50K lines of source code
- Fixed-price service with clear turnaround times
| - Detects exposed API keys and secrets from OpenAI, Anthropic, Stripe, AWS, Google, GitHub, SendGrid, Resend, Slack, Twilio, Firebase, and private keys
- Checks Supabase with RLS disabled to detect readable tables
- Scans for exposed environment files (.env, .env.local, .git/config, source maps)
- Tests Firebase Realtime Database and Firestore rules for open access
- Audits security headers and CORS configuration
- Monitors certificate expiry status on HTTPS sites
- GitHub repository scanning for Pro users to detect secrets in commit history
- Weekly rescans and instant alerts when new vulnerabilities appear
- Fix prompts compatible with Lovable, Bolt, Cursor, Claude Code, v0, and Replit
- Masked secrets in reports showing only first and last four characters
|
|---|
| What makes it different | - Automated evidence checks on every finding, no manual human review needed
- Full refund if no actionable vulnerabilities found
- Read-only access sufficient for scanning, no write permissions needed
- Free Lockdown Pack with security templates and checklists
| - Read-only scanning with no code access, form submissions, or database writes
- Built specifically for AI-generated apps from Lovable, Bolt, Cursor, Replit, and Supabase
- Full refund if any finding marked serious turns out not to be real within 14 days
- One-time payment for Proof Report with no subscription required
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 4 ● no change since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 4 | 0 |
|---|
| Citation Flow (Majestic) | 16 | 0 |
|---|
| Referring domains (Majestic) | 2 | 0 |
|---|
LockedVibe