API tokens
Scan your own verified site from a build pipeline and stop a deploy that drops the score below a number you choose.
Sign in to create a token. API tokens are part of Starter, Pro and Ultimate.
Sign in
SniffPupSign in Scan freeStart here
Free scanPaste your live URL. Passive, read-only, no signup.Sample reportSee a full report before you scan.How it worksPaste your link, see what's wrong, paste the fix.How the score worksStart at 100, minus points per finding. No letter grades.Sniff & Fix
Sniff & Fix hubPaste-in checks for other common bugs in AI-built apps.Payments DoctorPaste your Stripe checkout and webhook code. Quick check free; full check on Solo and up.Repo scanCheck a public GitHub repo for committed keys, .env files, tables without RLS and Stripe mistakes.Free toolsHeaders, public .env, source maps, Supabase keys and data, Firebase rules, RLS policy explainer.Your reports
Full fix reportEvery fix with prompts for Lovable, Cursor, Bolt and Claude Code, plus 30 days of re-scans.AI rules file (Guardrails)Turns your findings into a rules file for Cursor, Claude Code, Lovable or Bolt, so your AI helper is told not to repeat them. In the full fix report.Re-check one findingFixed something? Re-check just that finding in one click.PDF and Markdown exportDownload any full report.Dashboard and projectsEvery scan, score trends and before/after history.Scheduled re-scansDaily on every plan (every 12 hours on Ultimate), with an email when something new and serious shows up.For verified owners
Verify your siteDNS TXT record or a file. Unlocks the Pro deep checks.Deep Supabase and Firebase checkRead-only: which tables, collections and buckets a stranger can read. Counts only.Combined Supabase reportAdvisor + outside scan + deep check + fix prompts in one report.Score badgeScore 80+? Show a badge and public score page. Score and date only.Scan my app freeSign in