The Full Scan
Seven checks. One plain-English report.
A Full Scan runs all seven in parallel and merges the results, so one issue found by two tools appears once.
What each check looks for
- Secrets in codeAPI keys, service keys and passwords committed to the repo, including old commits.Read more
- Secrets in the live appKeys shipped to the browser, such as a Supabase service key.Read more
- Database lintsTables without row-level security, loose policies, exposed sensitive columns.Read more
- Anonymous data probeTables anyone can read with the app's public key.Read more
- Passive web scanMissing security headers, insecure cookies, information leaks.Read more
- Headers and certificateMissing basic headers, a certificate close to expiry.Read more
- DependenciesPackages with known vulnerabilities.Read more
Run all seven on your app.
Read-only, one price per app, a plain-English report with a fix prompt for every finding.