Free tools
Quick checks for the leaks we see most in apps built with AI. Free, no sign-up, and your keys stay in your browser.
- Launch checklistReady to launch? Check these first.The 28 things that break most when an AI-built app meets real users, each linked to a free check.Run the check
- Supabase RLS checkerCan anyone read your Supabase tables?Enter your project URL and public key. See which tables return rows to anyone, in your browser.Run the check
- Exposed API key scannerIs your API key in your website's code?Enter your site's address. We read the JavaScript every visitor downloads and flag secret keys, masked.Run the check
- Website security checkWhat grade does your site get?HTTPS, security headers, session cookies, and exposed .env or .git files. An A to F grade with the fix for each gap.Run the check
- RLS policy checkerWhat do your Supabase policies really allow?Paste your Row Level Security policies and read each in plain English, with the classic mistakes flagged.Run the check
- Email deliverability checkerWill your sign-up emails reach the inbox?SPF, DKIM, DMARC and MX for your sending domain, with the exact fix for each record.Run the check
- Error explainerStuck on an error your AI keeps 'fixing'?Paste it. Get what it means in plain English, the real cause, the fix, and a prompt that stops the fix loop.Run the check
- Can Google see your app?Can Google see your app?See your page the way search and AI engines read it before JavaScript runs, with the fix for each gap.Run the check
- Env file checkerWhich of your settings are public?Paste your .env. See which variables reach the browser, and catch secrets behind NEXT_PUBLIC_ or VITE_.Run the check
- Domain checkerIs your domain set up right?DNS records, HTTPS, redirect loops, www vs bare domain, and when the domain expires.Run the check
- AI bill calculatorWhat could your AI feature cost you?Your normal monthly AI bill, and what one bot hitting an unprotected endpoint for a night would cost.Run the check
- Security audit prompt generatorOne prompt that makes your AI audit your app.Pick your tool, database and features. Get one tailored prompt to paste into Claude Code, Cursor or Lovable.Run the check
Security checklists by tool
What to check before launch, for the tool you build with.