Is your website secure?
Paste your link. See what is broken. Get the exact fix to paste back into whatever you built with.
Free. Takes about ten seconds. We only look at what is public.
Three steps, no signup
Enter your website address
Nothing to sign up for and nothing to install. We only read what your site already shows to any visitor, and we never try to get into it or change anything.
We check it for security problems
Usually about ten seconds. We work through a library of 133 checks and run the ones that apply to your site, the way anyone on the internet could look at it if they wanted to.
You get the problems and the fixes
How many problems you have and how serious they are is free. For $19 the full report explains each one and gives you the steps to fix it.
What usually goes wrong
The problems we find most often in apps built with AI.
Your API key is sitting in the page
Anyone who opens the page source can find the key you pasted in. They can spend your credits.
Your database is open by default
Some platforms publish new projects publicly unless you change it. If nobody did, your users’ data is readable.
The login screen is not really locking anything
It looks right, but your database still answers anyone who asks it directly, with the key that is already in your page.
Old test and staging sites are still live
The staging copy from three weeks ago is still online, still connected to your data, and nobody has touched it since.
Admin pages with no lock
The page you built for yourself is reachable by anyone who guesses the address.
Your source code is downloadable
Build settings can ship a map of your whole codebase, including things you never meant to publish.
See what is wrong before you pay
How many problems you have, and how bad they are, is always free.
What each one is and how to fix it is the part you pay for.
The first visit to your site is unprotected
Someone typing the address without the padlock can be sent somewhere else before the real site ever loads.
One problem is opened in full, free, whenever there is a minor one to open. It is the least serious one, so you can see how we write before you decide.
An example, not a real report. Where there is a minor problem, one is shown in full and free, so you can see what you would be buying.
One payment. That is it.
$19
for one site. Not a subscription.
- What each problem is, in plain English
- Why it matters for your business
- The proof, so you can check it yourself
- Exactly how to fix it, step by step
- How to know the fix worked
- A PDF you can send to your web person
- Free re-checks for 30 days
What people ask before they run it
Is it safe to run on my live site?
Yes. Every check is read-only. We never log in, never submit a form, and never change or delete anything.
Does it work on a Lovable, Bolt, v0 or Base44 app?
Yes. Give it your domain or the address the platform gave you, and it checks whatever is actually live there.
Do I have to pay to see what is wrong?
No. The count of problems and how serious each one is, is free, and where you have a minor one it is opened in full so you can judge the writing.
Nothing wrong? You pay nothing
If we barely find anything, there is no report worth selling you. You get all of it free.
Fix it, then check again
Every fix tells you what should change once it works. Once you have the full report, checking again is free for 30 days.
No account, no subscription
Nothing to sign up for. Nothing that renews. One payment, one report, one link that is yours.