Free scan: $0. Fix Pack: $29 one-time (includes one deep scan and 2 re-scans for one app, plus 30 days of monitoring). Stay Locked: $15/mo (includes unlimited re-scans of one app, independent scan on every deploy, automatic daily re-scan). DIY playbook: $9 ebook.
Not given
Key features
Scans for leaked API keys and secrets from major providers
Detects exposed .env and .git files
Checks security headers and missing protections
Detects Supabase and Firebase backends
Copy-paste fix prompts for every finding
Ownership-verified deep scan with RLS testing
Automatic deployment scanning and grade monitoring
Passive and read-only scanning
Scans up to 20 JavaScript bundles and source maps
Integration with AI assistants via Model Context Protocol
Username checks across 2,518 sites in 17 categories
IP network context from Cloudflare Radar
Privacy Search mode to prevent scan history
Real-time scan progress updates
Public-web context search results
Account-context signals for email
Multiple input types: username, email, IP address
What makes it different
Specifically designed for AI-generated apps from Lovable, Bolt, Replit, Cursor and v0
Free scan with no signup required
Copy-paste fix prompts tailored to your AI builder
Re-scanning to prove fixes work
Automated alerts when security grade drops on deployment
No local installation required; runs entirely in browser
Transparent scan workflow with visible methodology
Independent from the SpiderFoot open-source project
Clearly distinguishes results as leads requiring verification
ShipLatch
SpiderFoot.tools