| What it does | Security scanner for AI-built websites
| Audit what your AI coding agent changed
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| Not given
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Basic: Free. Pro: $19 USD/month. Business: $39 USD/month.
| Free trial: 2 days, no card needed. Paid: $7 per person per month in US dollars.
|
|---|
| Key features | - Live URL security scan for vibe-coded apps
- Supabase Row Level Security checks
- Exposed API key and secret detection
- WCAG accessibility audit with axe-core
- SEO and AEO technical readiness checks
- Bundle size and unused code analysis
- Lab performance measurements (LCP, CLS, FCP, TTFB)
- GitHub source and Gitleaks secret detection
- AI fix prompts for Lovable, Bolt, Cursor, Claude
- Weekly and daily scheduled monitoring
| - Seven deterministic risk rules
- Receipt posted to pull request
- Automatic secret redaction
- Custom policy rules
- Dashboard with metrics
- Receipt export to PDF
- Team permissions and access control
- Receipts kept for seven days
- No LLM, deterministic flagging
|
|---|
| What makes it different | - Built specifically for AI-coded apps from Lovable, Bolt, v0, Cursor and Replit
- Evidence-based findings with severity, CWE/OWASP references and fix guidance
- Copy-paste AI fix prompts ready for your coding tool
- Real browser testing with Playwright and axe-core, not static analysis
- Scans public URLs without domain verification or credentials
| - Local-first with opt-in sync: nothing leaves your machine by default
- Deterministic rules, not machine learning: same input always gives same output
- Secrets redacted at the source before upload
- Command-line tool is free
- One flat rate per person, all features included
|
| Community votes | 0 | 0 |
| DR (Domain Rating by Ahrefs) | 1 ▲ +1 (up) since last check | Not checked yet |
| Trust Flow (Majestic) | 2 | 0 |
| Citation Flow (Majestic) | 14 | 16 |
| Referring domains (Majestic) | 1 | 2 |