What does Epherem check?

Your app's source code for who can see and change data, keys and secrets, how input is handled, and security settings. It also checks packages against published security advisories. It works best on JavaScript and TypeScript; Python is partly covered, and other languages are listed as not analysed.

Does an AI read my code?

No. The free scan uses fixed checks and a public advisory database, and no code is sent to an AI. You can paste a finding's fix prompt into your own AI tool if you want to.

How much does it cost?

Nothing during early access. Each account can run 5 scans a day. If that ever changes, the site will say so first, and Epherem will never charge you unless you choose to pay.

Cybersecurity

Epherem

Free security scanning for apps built with AI

0 votes. Log in to rate Epherem up Follow change log. Log in to follow Epherem's change log

A free source-code security scanner that checks apps built with AI tools for common security mistakes like exposed keys, open databases, and missing login

Overview

A look at epherem.com

Epherem is a free source-code security scanner designed for applications built with AI tools like Lovable, Bolt, v0, Replit, Cursor and Claude Code. Users can connect GitHub or upload a ZIP file to scan their code. The scanner runs 55 deterministic checks looking for exposed keys, open database tables, missing login and ownership checks, and unsafe input handling, as well as checking package dependencies against published security advisories. Each finding is categorized by certainty: known issues from published advisories, likely issues where the scanner saw risky code, or findings that need checking where protections may exist outside the scan's visibility. The full report is free with nothing hidden, and no AI reads the uploaded code.

Feature notes

55 security checks for common AI-built app mistakes
Package dependency vulnerability checking
GitHub integration and ZIP upload
AI tool fix prompts for Cursor and Claude Code
File and line number location for each finding
Plain language security explanations
Report persistence and code deletion
Coverage for JavaScript, TypeScript and Python

Pricing

Pricing model: Free

Free during early access, 5 scans a day

Follow change log. Log in to follow Epherem's change log

Follow Epherem to get an email when they post a milestone, ship a new product or add a demo video.

Epherem at a glance

Community votes: 0
Followers: 0
HQ: Singapore
Stage: MVP

Epherem metrics

Inspection sheet for epherem.com: Ahrefs Domain Rating and Majestic link metrics, with the delta since the last inspection.
Metric	Value
Domain Rating	2 +1 (up) since last check
Trust Flow	6 no change since last check
Citation Flow	25 no change since last check
Referring domains	16 no change since last check
External backlinks	130 no change since last check

Domain Rating by Ahrefs inspected 7 Nov 2026, adjusted 26 Oct 2026. Primary topic: Computers/Internet/On the Web (6). Majestic inspected 25 Oct 2026, adjusted 25 Oct 2026. Link data: Majestic. Trust Flow, Citation Flow and Topical Trust Flow are trademarks of Majestic-12 Ltd.

Epherem domain diagnostics

Run through the diagnostics

Public RDAP record, last read 5 Nov 2026, 02:46 UTC.
Domain age	4 months
Registered	27 Jun 2026
Expires	27 Jun 2027
Registrar	NameCheap, Inc.
DNSSEC	Not signed

Run the full check on epherem.com

Epherem post-launch diagnostics

Measured after Epherem went live on Launching Pro on 25 October 2026.

Domain Rating (Ahrefs): 2 +1 (up) since launch; 1 at launch (25 Oct 2026), 2 on 7 Nov 2026
Trust Flow (Majestic): 6; First measured 25 Oct 2026
Referring domains (Majestic): 16; First measured 25 Oct 2026

Day 12 since launch. Next receipt: day 30, 24 Nov 2026. The figures report a change; they do not say what caused it, and many things can. No figure here is a guess.

Biggest gains on Launching Pro

Launch tips, free to read

The playbook on Launching Pro lists what to prepare, what to post on launch day and where else to list your product.

Before the day
Launch day
That week
Beyond launch

See the launch playbook

Compare and explore

FAQ

What does Epherem check?: Your app's source code for who can see and change data, keys and secrets, how input is handled, and security settings. It also checks packages against published security advisories. It works best on JavaScript and TypeScript; Python is partly covered, and other languages are listed as not analysed.
Does an AI read my code?: No. The free scan uses fixed checks and a public advisory database, and no code is sent to an AI. You can paste a finding's fix prompt into your own AI tool if you want to.
How much does it cost?: Nothing during early access. Each account can run 5 scans a day. If that ever changes, the site will say so first, and Epherem will never charge you unless you choose to pay.

Leave a review for Epherem

No reviews of Epherem yet. Run the first inspection.

Reviews are free and are never paid for. Open the reviews

Reviews and notes · Change log · Share the profile · Maker of this product? Claim the profile · Report a fault

Comparable tools

Bugcrowd0 community votes
DivoltDR 18 · 0 community votes
StealthMoleDR 33 · 0 community votes
mlab.shDR 26 · 0 community votes

Feature notes

Pricing

Compare and explore

Leave a review for Epherem

More on this profile