We scan ourselves

Every day our cron job runs the same free, passive scan you get on sniffpup.com and stores the result. This page shows the latest stored scan.

No self-scan has been stored yet. The first one runs with our next daily check.

Checks run

  • Leaked API keys and secrets in the page and its JavaScript
  • Public sensitive files (.env, .git, .npmrc, .DS_Store and similar)
  • Public source maps
  • Security headers
  • Cookie flags
  • HTTP to HTTPS redirect
  • HTTPS certificate
  • CORS settings
  • Outdated JavaScript libraries
  • Exposed Supabase and Firebase data (signed-out reads)
  • Email domain records (SPF, DMARC, DKIM)
  • What AI crawlers like GPTBot can read

A score of 100 means this scan found nothing to fix in what is publicly visible. It is not a guarantee of security. How the score works 路 How our scanner works

Scan your app free