Apps from Lovable, Bolt, Cursor, Replit, and v0 can expose API keys or database configs to anyone, or quietly break. Paste a URL. The free check tells you what a stranger can already see. No sign-up. It does not submit forms or log in. Not a security audit.
