Skip to content
Sniff
Pup
Scan
Pricing
Guides
Tools
▾
About
Search SniffPup
Sign in
Scan free
Start here
Free scan
One scan for everything: keys, exposed files, source maps, headers, Supabase and Firebase, speed and crashes. Passive, read-only, no signup.
Sample report
See a full report before you scan.
How it works
Paste your link, see what's wrong, paste the fix.
How the score works
Start at 100, minus points per finding. No letter grades.
Sniff & Fix
Sniff & Fix hub
Paste-in checks for other common bugs in AI-built apps.
Payments Doctor
Paste your Stripe checkout and webhook code. Quick check free; full check on Solo and up.
Repo scan
Check a public GitHub repo for committed keys, .env files, tables without RLS and Stripe mistakes, plus a licence check and an SBOM of your npm packages.
Supabase project check
Connect your Supabase project for a free, read-only check of its security settings. You get a score out of 100, and critical issues come with their fix.
Migration safety check
Paste a database migration, or scan a repo, to catch steps that delete or rewrite data before they run. It also flags migrations that run on deploy with no backup first, and the Supabase project check shows whether you have a backup to restore from.
Cleanup report
Part of the free repo scan: packages and files you likely don't use, copied code, very large files and errors that get hidden, with a cleanup score out of 100 and a step-by-step cleanup plan. Every finding is free; Solo and up get every fix step.
Free tools
Quick checks, code and repo checks, the RLS policy explainer and builder tools. Everything else is in the free scan.
Your reports
Full fix report
Every fix with prompts for Lovable, Cursor, Bolt and Claude Code, plus 30 days of re-scans.
AI rules file (Guardrails)
Turns your findings into a rules file for Cursor, Claude Code, Lovable or Bolt, so your AI helper is told not to repeat them. In the full fix report.
Re-check one finding
Fixed something? Re-check just that finding in one click.
PDF and Markdown export
Download any full report.
Dashboard and projects
Every scan, score trends and before/after history.
Scheduled re-scans
Weekly on Free, daily on Solo, and every hour on Starter, Pro and Ultimate for sites you've verified, with an email only when something new and serious shows up or gets worse.
For verified owners
Verify your site
DNS TXT record or a file. Unlocks the Pro deep checks.
Deep Supabase and Firebase check
Read-only: which tables, collections and buckets a stranger can read. Counts only.
Combined Supabase report
Advisor + outside scan + deep check + fix prompts in one report.
Score badge
Score 80+? Show a badge and public score page. Score and date only.
Learn
All checks
Every check SniffPup runs, in one list.
Guides
Pre-launch checklists for Lovable, Bolt, Cursor, Replit and Supabase.
Leaked a key?
What to do in the next 10 minutes: OpenAI, Stripe, Supabase, AWS, GitHub.
Changelog
Everything we shipped, newest first.
Compare scanners
What we check and what others check. Facts only.
Search SniffPup
Scan
Pricing
Guides
Tools
About
Sign in
All features
Start here
Free scan
Free
Sample report
Free
How it works
How the score works
Sniff & Fix
Sniff & Fix hub
Payments Doctor
Free quick check
Repo scan
Free quick check
Supabase project check
Free account
Migration safety check
Free
Cleanup report
Free
Free tools
Free
Your reports
Full fix report
$9 once
One-time
AI rules file (Guardrails)
Full reports
Re-check one finding
On unlocked findings
PDF and Markdown export
Full reports
Dashboard and projects
Free account
Scheduled re-scans
Plans
For verified owners
Verify your site
Deep Supabase and Firebase check
Pro
Combined Supabase report
Pro
Score badge
Verified owners
Learn
All checks
Guides
Leaked a key?
Changelog
Compare scanners
Scan free
Search
Search SniffPup
Popular:
Supabase
·
leaked key
·
Lovable
·
headers
Scan
Apps
Fix
Learn
Account
SniffPupSign inScan freeSniffPupSign inScan free