Free tool

Is your AI-built app leaking keys or invisible on Google?

Paste your Lovable, Bolt, Replit, v0 or Next.js app's address. In about 30 seconds you'll get a security, SEO and speed score, and the problems that need fixing first.

What we check

Security

  • API keys shipped to the browser (OpenAI, Anthropic, Stripe, Resend, SendGrid, GitHub, AWS)
  • Supabase service_role key exposed in your frontend
  • Supabase and Firebase keys that need RLS or restrictions
  • Public source maps that reveal your source code
  • HTTPS and missing security headers

SEO & AI search

  • Empty HTML that Google and AI search tools can't read
  • Template titles like “Vite + React” or “Lovable App”
  • Missing descriptions, social previews, canonical and H1
  • noindex left on from staging
  • robots.txt, sitemap.xml and soft 404s

Speed

  • Server response time
  • Total JavaScript your homepage loads
  • Compression

Questions

Is the check really free?

Yes. The check gives you a score and the three most serious problems on screen, and you can get the full report with every issue, where we found it and how to fix it, free by email.

Do you access my database or log in to my app?

No. We only read what any visitor's browser downloads from your public homepage: the HTML, your own JavaScript files, robots.txt and sitemap.xml. We never log in, send data to your database or try hidden pages.

Which apps does it work with?

Any public website, and it's tuned for apps built with Lovable, Bolt.new, Replit, v0, Cursor and other AI builders, plus Next.js, Vite, React, Supabase and Firebase projects.

Why does an exposed Supabase service_role key matter so much?

The service_role key skips Row Level Security. Anyone who copies it from your site can read, change or delete every row in your database. If the check finds one, rotate it immediately.

Can you fix the problems for me?

Yes. Our developers fix most of these issues within 24 hours. Use the “have us fix everything” link after your check, or visit our 24-hour bug fix page.

Already know what's broken? Get it fixed in 24 hours.