live check
AI App Safety Check
Paste the URL of an app built with Lovable, Bolt, Replit, v0 or Cursor. We scan what every visitor downloads for exposed API keys, Supabase service keys, public source maps, .env files and missing security headers.
Only scan apps you own or have permission to test. We only read what any visitor's browser already downloads, and we never show secret keys in full. Scans take up to 30 seconds.
more for agencies & ai-built apps