SniffPup

SniffPup is a passive security scanner for the live web URLs of apps built with AI tools like Lovable, Bolt, Cursor, Replit and v0. It checks what any stranger can see: secret keys in HTML and JavaScript, public /.env and /.git files, the source map your JavaScript points to, security headers, cookie flags and HTTPS. The free scan lists every issue and gives the full fix for every critical issue free (if there are none, one other fix is free). A one-time $9 Full Fix Report unlocks every fix plus 30 days of re-scans; plans from $7/mo. It can't see your code or RLS policies, and a 100 score means no issues were found in our checks, not proof of security.