About
ShipSniffer checks AI-built apps for the mistakes that get them breached or ignored at launch. Paste your URL and get a 0-100 ship score in about a minute, with no signup.
What it checks for free
• Leaked API keys and secrets in your HTML and JS bundles
• Missing security headers and HTTPS issues
• SEO and launch blockers: meta tags, Open Graph cards, robots.txt, sitemap, favicon, broken links
Deep Firebase/Supabase checks
Test whether your database is readable without login. These checks run only on domains you've verified you own.
Premium source scan
Scan a public GitHub/GitLab repo or a .zip for committed .env files, hardcoded secrets, open Firebase rules, tables without Row Level Security, SQLi/eval/XSS patterns and vulnerable npm packages.
Copy-paste fixes
Every finding comes with a ready-made prompt for Cursor or any AI coding tool.
Pricing
Free scan shows your most serious issue in full. $12 one-time unlocks the full report. No subscription.