Free tools
Free security tools.
Free security tools.
No signup.
Quick, single-purpose checks you can run right now. For the full picture — code, fixes, and monitoring — run a free scan.
Supabase exposure checker
Is your Supabase anon key doing more than it should? Check for public tables and missing RLS.
Run the check →Security headers checker
Grade your response headers — HSTS, CSP, X-Frame-Options — and see exactly what to add.
Run the check →.env exposure checker
Is your .env reachable from the internet? One of the most common — and worst — leaks.
Want the whole picture?
A free scan grades your live app and code A–F and drafts the fixes.