Free scan: $0. Fix Pack: $29 one-time (includes one deep scan and 2 re-scans for one app, plus 30 days of monitoring). Stay Locked: $15/mo (includes unlimited re-scans of one app, independent scan on every deploy, automatic daily re-scan). DIY playbook: $9 ebook.
Single APK / AAB: $19 one-time. All Versions: $49 one-year. Enterprise: $299 one-time.
Key features
Scans for leaked API keys and secrets from major providers
Detects exposed .env and .git files
Checks security headers and missing protections
Detects Supabase and Firebase backends
Copy-paste fix prompts for every finding
Ownership-verified deep scan with RLS testing
Automatic deployment scanning and grade monitoring
Passive and read-only scanning
Scans up to 20 JavaScript bundles and source maps
Integration with AI assistants via Model Context Protocol
AES-256 source code encryption with HMAC-SHA256
Anti-decompiler defense against JADX, MT Manager, and Apktool
Anti-Frida and anti-hooking defense
Anti-tampering and signature verification
Anti-root and kernel shield
Zero battery drain architecture
18ms cold-boot overhead
Full multi-DEX protection
100% offline engine with zero cloud dependency
Support for Flutter, React Native, Java, Kotlin, and Unity apps
What makes it different
Specifically designed for AI-generated apps from Lovable, Bolt, Replit, Cursor and v0
Free scan with no signup required
Copy-paste fix prompts tailored to your AI builder
Re-scanning to prove fixes work
Automated alerts when security grade drops on deployment
Starts at $19 with no recurring monthly fees or enterprise contracts
Zero code integration - works with APK and AAB files post-build
100% offline operation with zero cloud dependency or telemetry
Native AArch64 assembly with zero idle battery drain and 18ms launch speed
Instant or same-day delivery without sales pipeline delays
ShipLatch
T4X Protection