| What it does | Web security intelligence platform that scans sites across eight layers and provides audit-ready evidence
| Security scanner that finds leaked API keys and exposed files in AI-built apps
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | GB
| US
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Free tier with no account required. Starter from £29/month. Pro from £79/month. Enterprise from £99/month.
| Free scan; Full Fix Report $9 one-time; Solo $7/month or $70/year; Starter $15/month or $150/year; Pro $29/month or $290/year; Ultimate $49/month or $490/year. Yearly plans include 2 months free.
|
|---|
| Key features | - 8-layer security analysis covering HTTP/TLS, HTML, network traffic, JavaScript CVEs, tag managers, third-party supply chain, platform misconfigurations, and server software CVEs
- Single-page instant scan with report in 15 seconds
- JavaScript CVE detection using Retire.js and OSV database
- Third-party domain mapping with threat intelligence checking
- Security score 0-100 and A-F grade calculation
- API endpoint discovery and testing for REST, GraphQL, and SOAP
- AI-written remediation steps specific to each finding
- Subdomain discovery via certificate transparency and common names
- OWASP Top 10 coverage checklist on every report
- Compliance control mapping for NIS2, PCI DSS, and other standards
| - Leaked API key detection in JavaScript and inline scripts
- Public .env, .git and other sensitive file discovery
- Security headers validation
- Source map exposure detection
- HTTPS certificate validation
- Outdated JavaScript library detection
- AI crawler visibility check
- Database exposure testing for verified owners
- AI rules file generation to prevent future issues
|
|---|
| What makes it different | - No account required for free scans
- Audit-ready evidence packaging with compliance mappings
- Authenticated scanning via browser session capture for WebAuthn support
| - Passive, read-only scanning from outside—never logs in or uses found secrets
- Designed specifically for AI-built apps from Lovable, Bolt, Cursor and other builders
- Plain-English explanations and copy-paste fix prompts for your AI tool
- Free scan with no signup required, results immediately
- AI rules file turns findings into guardrails for your coding assistant
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 16 ▲ +1 (up) since last check | 3 ▲ +1 (up) since last check |
|---|
| Trust Flow (Majestic) | 10 | 0 |
|---|
| Citation Flow (Majestic) | 29 | 0 |
|---|
| Referring domains (Majestic) | 67 | 0 |
|---|
Decloak
SniffPup