Free: 1 scan per month. Top-up: $10 USD (₹799) for 6 scans, one-time purchase. Founder: $22 USD (₹1,799) per month or $220 USD (₹17,990) per year for 36 scans per month. Services from $150 USD (₹12,000).
Free scan: score out of 100. Fix report: $9 one-time for copy-paste fix prompts per issue. 10 fix reports: $29 one-time for 10 credits for re-scans.
Key features
Security score out of 100 with findings ranked by severity
Plain-English vulnerability explanations
Attack path mapping to MITRE ATT&CK techniques
Code map showing which files to fix first
Audit logs of scans, sign-ins and changes
README badge showing current security grade
MCP server for scanning from AI agents
Leaked credential testing and live-key check
Scan live apps in about 20 seconds
Detects Stripe, OpenAI, Anthropic and AWS keys
Checks for exposed .env and .git files
Validates security headers (CSP, HSTS, etc)
Verifies HTTPS and SSL certificate validity
Masks secrets in reports (first 6 chars + ****)
No database queries or Row Level Security testing
Copy-paste fix prompts for Lovable, Bolt, Cursor
What makes it different
Only security scanner built specifically for AI-generated code from tools like Bolt, Cursor and v0
AI-powered false-positive reduction prevents noise in security reports
Automated fix prompts written for the specific AI tool that built the app
Code is deleted after scan completes with no backups or model training
Built specifically for AI-builder apps (Lovable, Bolt, Cursor)
Free scan with no signup required
Crawls lazy-loaded JavaScript chunks most scanners miss
Sentrint
PlugLeak