Is your app leaking data or keys?
A free security check made for apps built with Lovable, Bolt, Replit, v0 and Cursor. Paste your link and see your security score in about 20 seconds.
Questions
Is the security check really free?
Yes. The quick check is free with no account, up to 5 times a day. The full security check, with database, private-file and package checks plus one-click fixes, is included in the Plus and Pro plans.
What does it check?
Your padlock and certificate, the protective settings browsers rely on, secret and AI keys in the code visitors download, published source code, outdated libraries, unsafe forms, login cookies, and whether scammers can send email as your domain.
Does it work for Lovable, Bolt, Replit and v0 apps?
Yes. It works on any public website, and it knows the mistakes AI app builders make most often, like keys in the browser code and open Supabase tables.
Can it check my Supabase database?
Yes, in the full security check. To make sure nobody can test a site that isn't theirs, Phixer first asks you to add one line to your site that proves it's yours.
Does Phixer try to hack my site?
No. Phixer only reads what any visitor, browser or mail server can already see. It never sends attacks, never logs in, and never changes anything.