Free check

Is my app leaking?

Connect your app from GitHub, or upload its code. We read it, change nothing, and show you what we found. No AI key needed: the check itself runs no AI.

Free during early access. We read it again after every change, and every night. What we can and cannot read yet

Request early accessAlready signed in? Your apps

New accounts need an invitation for now. No invitation yet? Ask on the next page, and we write to you when you are in.

What we look at

We read your code. We do not test your live site, and a rule that cannot see something says so.

  1. 1

    Open data

    Database tables your code lets anyone on the internet read.

  2. 2

    Keys in the code

    Passwords and API keys written into files other people can see.

  3. 3

    Parts with known flaws

    Packages your app uses that have a published security problem.

The map we draw for each app

24 areas, in 6 groups. 23 are read as rules from your code today. For Tests, we run your app on a copy. What each area checks

  • Safe

    • Data access
    • Keys
    • Logins
    • Access holes
    • Input safety
    • Cost guard
    • Parts
    • Old runtimes
    • Browser protections
    • Build robot

  • Works

    • Testson a copy
    • Errors and uptime
    • Backups
    • Speed

  • Legal

    • Legal pages
    • Personal data
    • Accessibility
    • Open-source licences

  • Money

    • Payments

  • Reach

    • Email
    • Search and launch
    • Marketing

  • Run

    • Staging and deploys
    • Support

Why we ask you to sign in

So that only the owner can ask for a check. We never look at an app nobody asked us to, and we never change anything without your yes.