When LeakScan can scan your Replit app
All four need to be true:
- The code is in a GitHub repository
- The database is a Supabase project you own
- The app is hosted outside Replit, for example on Vercel or Netlify
- The app is served from a domain you can verify
What you get
Seven read-only checks, a health score, every finding explained in plain English, and a fix prompt you paste into Replit Agent. One free rescan within 14 days.
Not covered yet
Apps hosted on Replit, including those that use Replit's built-in database, are on the roadmap, in the order customers ask for them.
Common questions
Should I move my Replit app just to get scanned?
No. Do not move a production app or database just for a scan. Wait for native support if your app is happy where it is.