keyleak
Free · read-only · nothing in your app is touched

Find the leaks before attackers do.

Shipped an app with Lovable, Bolt, v0, Cursor or Supabase? Run a free scan to catch exposed API keys, missing Supabase row-level security, and common security holes in your live app — each with a paste-ready fix for your AI coding agent.