Free launch scan

Paste a public GitHub repo. We check for leaked secrets, committed .env files, Supabase tables without RLS, unprotected API routes, unverified Stripe webhooks and vulnerable dependencies. We delete the code right after the scan. For private repos, install the GitHub App.

Limit 5 scans per hour. Automated best-effort review, not a penetration test or security guarantee.