Launching Monday, November 23, 2026
00
:00
:00
:00
days
hours
mins
secs
About
ShipLatch scans the live URL of apps built with Lovable, Bolt, Cursor, Replit and similar tools for what a stranger's browser can see: exposed API keys, public /.env and /.git files, source maps, Supabase/Firebase misconfigurations and missing security headers. The scan is free and includes a free header fix. The $29 Fix Pack adds app-specific fix prompts plus proof re-scans, and Stay Locked ($15/mo) re-scans on every deploy and alerts you if something regresses.