Free passive check
We fetch your page's HTML and its same-origin JavaScript bundles (max 10), then look for leaked secrets, Supabase keys and missing security headers. Nothing else: no database probing, no logins, no writes, no crawling.
We fetch your page's HTML and its same-origin JavaScript bundles (max 10), then look for leaked secrets, Supabase keys and missing security headers. Nothing else: no database probing, no logins, no writes, no crawling.