Search

6 results for "headers"

• Guide How to secure a Windsurf app: a pre-launch security checklist (Windsurf is now Devin Desktop)

  Built your app in Windsurf (now Devin Desktop)? Keep .env files out of git and away from the agent, keep secret keys out of NEXT_PUBLIC_ and VITE_ variables, turn on Supabase RLS, make sure /.env and /.git aren't public, add security headers, then check what your live site shows a stranger.

• Guide Vibe-coded app security checklist: 14 checks before you launch

  To check if your vibe-coded app is secure, test your live site, your database and your code. This checklist for Lovable, Bolt, Cursor, Replit and v0 apps covers leaked keys, Supabase RLS, storage buckets, API route auth, rate limits, webhook signatures and headers, with a test for each.

• Tool Lovable app security scanner (live URL)

  Free passive scan of your published Lovable app's live URL: secret keys in JavaScript, public .env and .git files, Supabase key exposure and security headers. Pairs with Lovable's scans.

• Tool Bolt app security scanner for your live site

  Free passive scan of your published Bolt.new app: secret keys in VITE_ variables and JavaScript bundles, public .env and .git files, Supabase key exposure and security headers.

• Tool Cursor app security scan: check your live app

  Free passive scan of the app you built with Cursor, once it's live: keys in NEXT_PUBLIC_ and VITE_ bundles, public .env and .git files, source maps, open Supabase tables, CORS and headers.

• Tool Replit app security scanner for your live site

  Free passive scan of your published Replit app: secret keys in HTML and JavaScript bundles, public .env and .git files, source maps, Supabase or Firebase exposure and security headers.