Free security scan

Paste your live app URL. We'll look at the public surface: HTTPS, headers, leaked keys in the HTML and same-origin JavaScript, plus robots.txt and a sitemap. We don't log in, write anything, or poke your database.