Production-readiness audit · automated
Should it launch?
Find out before your client does. Paste a URL and we scan an AI-built site for leaked keys, dead forms, and broken access controls a demo never shows.
3 free scans a day. No card, no account.
01 · The Moon
What a demo hides
It looked finished on the call. The bundle holds a service_role key, the contact form posts nowhere, the public key reads tables it never should. A click-through shows none of it.
02 · Mars
Evidence, not opinions
A live service_role key is exposed in the client bundle.
assets/index-4f1c2a.js:1
const supabase = createClient(url,
"eyJhbGci…role:service_role") 03 · The belt
The small stuff still sinks you
A missing alt attribute. A console error left in. A meta tag pointing nowhere. None of it sinks a demo. All of it lands in the audit.
04 · Jupiter
Eight dimensions, every pass
- Security
- Functional
- Accessibility
- Performance
- SEO
- Privacy
- AI-tells
- Responsive
Every finding carries the line of code that proves it.
05 · Saturn
One verdict, and you can trust it
Ship, ship with fixes, or not ready. The call sits at the top, above every finding. The gate is tuned so a false ship costs far more than a missed nit, so a clear is a real clear.
06 · Uranus
The report you hand over
White-label, your name on it, exportable as a PDF. Give it to the client as your own work, or keep it as the punch list you clear before they ever see the site.
07 · Neptune
A verdict in seconds
Paste the URL and the scan runs while you wait. The full audit, across all eight dimensions, comes back in seconds. No sending the site out and waiting days for a manual once-over.
08 · Pluto · the edge
Know before
you hand it over.
3 free scans a day. No card, no account.
/ 01 · Sample report
The report you hand the client.
A real example. Fictional client, real findings, the dossier you hand over.
A live Supabase service_role key is exposed in the client bundle.
With that key, anyone who opens the browser console can read and write the database. This ships before the client sees it, or it does not ship.
assets/index-4f1c2a.js:1 const supabase = createClient( url, "eyJhbGciOiJIUzI1Ni…role:service_role" ) // redacted in your hosted report
Eight dimensions checked
pk_live_51Q8t… Stripe publishable key. Public by design. Not a leak.
/ 02 · Why it matters
Sites built on v0, Lovable, Bolt, Replit, Cursor, or Claude look done in the demo.
They ship with leaked keys, missing access rules, dead links, default titles, and placeholder text the generator left behind. A demo hides all of it. A paying client, clicking around on launch day, finds it for you. Here is what each one costs.
/ 03 · How it works
Enter your URL
Paste the site you are about to hand over. Nothing to install.
The engine scans it
Every check runs across all eight dimensions in one pass. Deterministic, evidence-backed, no guesswork.
You get the verdict
Verdict first, evidence on every finding, white-label. In your browser in minutes, ready to export.
/ 04 · Pricing
One report, or every site you ship.
A failed audit is never charged, and re-scans to prove your fixes are free. No call required to see what we charge.
One-off report
One full rendered audit of one site. Re-scan it free until your fixes land. The report is yours to keep, private or shared by link.
Run an auditPro subscription
15 new sites a month, white-label reports you hand a client, monitoring that re-audits on a schedule or when you deploy, and free re-scans. Renews monthly, cancel anytime.
Get Pro