isitsecure

Working

Free security scanner for AI-built apps

43 GitHub starsPushed 3 days agoRuns in the browser1 checkDeveloper utilities

Open isitsecure SourceChecked 2 days ago

What stands out

Taken from the page and the access facts we recorded. Nothing here is guessed.

scan an AI-built app for exposed secrets
check missing security headers on a public URL
No account required
Free
Source is public

What we checked

A missing tick means we have not measured it. A red mark is a check that failed.

App accessible
The last check reached a working page.
Page rendered
The last browser pass found a page that rendered.
Screenshot kept
We captured a picture of the page.

Looked: 0
Opened: 1
Checks: 1
Watching: 0

Looked and opened count distinct browsers on this site, not verified people. Checks are requests we made. None of these come from the app itself.

Screenshot of isitsecure — Screenshot from our last captureThis site blocks embedding

Development

One snapshot so far

Active

Commits landed in the last 90 days.

We hold one capture of this repository, so there is no trend to show yet. That is a fact about how long we have been watching, not about the project.

Evidence

Each bar is one request we made

Checks: 1
Working: 100%
Median response: 362ms
Watching since: 2 days ago

Browser render check

Checked 12 hours ago in a real browser

2 pages rendered

/rendered35ms
/pricingrendered548ms

Pages loaded in a real browser, not just an HTTP request. Route discovery is best-effort — nav links not in the initial DOM are not followed. How we check

Activity

Watching since 2 days ago

Last content change: None seen yet
Unchanged for: 2 days
Certificate expires: in 153 days

We hash the visible text on every check, so a redesign registers and a rotating advert does not. An app that has not changed in a long time is not necessarily abandoned — but it is a fact worth knowing before you depend on it.

What it does

isitsecure scans a public app URL for exposed secrets, missing headers, and database vulnerabilities. It is aimed at Lovable, Bolt, Replit, Vercel, and Netlify apps and reports findings in under 60 seconds. The scan is offered for free.

What people say

No reviews yet.

We would rather show none than invent them.

Embed this status

Put it in your README. It updates itself every time we check, and links to your verification record — evidence a stranger can read, not a page selling them something.

[![isitsecure — still works](https://itstillworks.cruscible.com/api/badge/isitsecure)](https://itstillworks.cruscible.com/verify/isitsecure)

Others like this

Each of these answered on its most recent check.