Early access
Find out what's actually wrong with your app's security.
Paste a URL and get a free scan in under 2 minutes. No account, and no access to anything.
We only make ordinary web requests, the same ones any visitor could make.
Security headers
HSTS, CSP and the other headers browsers rely on.
Exposed files
Public .env files, .git folders and source maps.
Leaked keys
Live secrets shipped in your client JavaScript.