Free security tools for apps built with AI

Three checkers for the mistakes that most often leave an app open: weak database rules and secrets shipped to the browser.

Supabase security scanner
Connect a project read-only and get a graded report on RLS, policies, functions and auth, with a fix for each finding.
Firebase rules checker
Paste your Firestore, Storage or Realtime Database rules and see which paths are open to anyone.
Secret scanner
Check a public page and its script files for leaked API keys. Values are shown masked.

Rules and pages are processed in memory and nothing is stored.