Skip to content
S

SniffPup

Free passive security scan for vibe-coded web apps

VerifiedUnclaimed
What it is

Paste your live URL and SniffPup runs a passive, read-only scan. It never logs in, never sends exploit payloads and never uses a key it finds. It checks secrets in your HTML and same-origin JavaScript (including Supabase service_role and sb_secret keys), public /.env, /.git, /.npmrc and /.DS_Store files, the source map your JavaScript points to, security headers, cookies, the HTTPS redirect and certificate, outdated JavaScript libraries, and what AI crawlers can read. The scan is free. It covers live web URLs only. A score of 100 means no issues were found in our checks; it is not proof of security. SniffPup works alongside Lovable's and Bolt's built-in scans and Supabase Security Advisor.

Pricing
Freemium
Open source
No
Platforms
  • Web
Launched
Tags
  • security
  • vibe coding
  • supabase
  • lovable
  • web scanner
Verification

Checked by Makeroo on .

  • Real passive security scanner for live web apps with a consistent, detailed description and pages.
  • Tagline matches the described free passive scan for vibe-coded apps.
  • Category Developer Tools fits a security scanner for developers.
Ownership

Unclaimed — claim it