Independent security researcher mapping India and APAC's exposed attack surface at internet scale
Stage
Startup
Not given
Founded
Not given
Not given
Based in
US
IN
Pricing model
Freemium
Not given
Pricing
Free scan: $0. Fix Pack: $29 one-time (includes one deep scan and 2 re-scans for one app, plus 30 days of monitoring). Stay Locked: $15/mo (includes unlimited re-scans of one app, independent scan on every deploy, automatic daily re-scan). DIY playbook: $9 ebook.
Not given
Key features
Scans for leaked API keys and secrets from major providers
Detects exposed .env and .git files
Checks security headers and missing protections
Detects Supabase and Firebase backends
Copy-paste fix prompts for every finding
Ownership-verified deep scan with RLS testing
Automatic deployment scanning and grade monitoring
Passive and read-only scanning
Scans up to 20 JavaScript bundles and source maps
Integration with AI assistants via Model Context Protocol
Internet-scale sweeps of India and APAC address space for exposed infrastructure
Manual verification of all findings before publication
Mapping of findings to DPDP Act and ISO 27001 compliance frameworks
Detection of exposed Swagger and OpenAPI specifications with 38% of specs exposing unauthenticated routes
GraphQL introspection scanning finding 2,159 services exposing full schema without authentication
proxy2model tool to map web applications from captured traffic
cvecheck series assessing CVEs with affected scope and exploitation evidence
What makes it different
Specifically designed for AI-generated apps from Lovable, Bolt, Replit, Cursor and v0
Free scan with no signup required
Copy-paste fix prompts tailored to your AI builder
Re-scanning to prove fixes work
Automated alerts when security grade drops on deployment
Focus on India and APAC region often overlooked by mainstream security research
Country-scale studies verified by manual re-check rather than relying on scanner output alone
Open-source tools built from patterns discovered during research
Research published with governance context and remediation playbooks
Detailed findings on infrastructure exposures with specific counts and evidence
ShipLatch
falc0n