Free security tools for apps built with AI.
Each one answers one question in seconds, without an account. Most run entirely in your browser: what you paste never leaves the page.
- Security headers checkerPaste an address: see which security headers your site sends, which are missing, and the exact line to add for each.Free, no accountOpen
- Supabase key checkerPaste a Supabase key: learn in one second whether it is the public anon key or a service role key that must never leave your server.Runs in your browserOpen
- Supabase RLS checkerOne query in your SQL editor lists every table without row level security and every policy that lets anyone in.Runs in your browserOpen
- Firebase rules checkerPaste your Firestore, Realtime Database or Storage rules: every rule that lets a stranger read or write is flagged, with the fix.Runs in your browserOpen
- Next.js and React CVE checkerEnter your Next.js and React versions, or paste package.json: see every known CVE that applies and the version that fixes it.Runs in your browserOpen
- API key leak checkerPaste JavaScript, an env file or a config: every API key in it is named, rated public or secret, and given its rotation steps.Runs in your browserOpen