Free security scan

Paste your live app URL. We'll look at the public surface: HTTPS, security headers, leaked keys in the HTML and same-origin JavaScript, and robots.txt and a sitemap. If we spot a Supabase project, we also try a signed-out read on a few common table names with your public anon key, to see what a stranger could pull. We never log in and never write anything.