SniffPup
Free passive security scan for vibe-coded web apps
Paste your live URL and SniffPup runs a passive, read-only scan. It never logs in, never sends exploit payloads and never uses a key it finds. It checks secrets in your HTML and same-origin JavaScript (including Supabase service_role and sb_secret keys), public /.env, /.git, /.npmrc and /.DS_Store files, the source map your JavaScript points to, security headers, cookies, the HTTPS redirect and certificate, outdated JavaScript libraries, and what AI crawlers can read. The scan is free. It covers live web URLs only. A score of 100 means no issues were found in our checks; it is not proof of security. SniffPup works alongside Lovable's and Bolt's built-in scans and Supabase Security Advisor.
- Freemium
- No
- Web
- security
- vibe coding
- supabase
- lovable
- web scanner
Checked by Makeroo on .
- Real passive security scanner for live web apps with a consistent, detailed description and pages.
- Tagline matches the described free passive scan for vibe-coded apps.
- Category Developer Tools fits a security scanner for developers.
Unclaimed — claim it