Auditly
Find the security holes in your site before attackers do
Start new thread

Auditly - Find the security holes in your site before attackers do

by•
Auditly checks your site the way an attacker would: exposed .env and .git files, API keys in your JavaScript, open Supabase tables, weak headers, vulnerable libraries. Verify your domain, get a PDF with the urgent issues on top and the fix next to each one.

Add a comment

Replies

Best
Maker
📌

Hello Product Hunters! I'm Oscar Quintero, a graphic/web designer turned solo developer, based in Canada🍁.

I built Auditly after looking at sites shipped in a hurry (a lot of them vibe-coded) and seeing the same problems again and again: API keys sitting in the JavaScript, a .env or .git/config open at the root, Supabase tables anyone can read. None of it needs hacking. Just looking.

How it works:

1. You verify you own the domain (TXT record or a file). Nothing is tested before that.

2. A real browser crawls the site, so React, Next and Vue apps get checked too.

3. 18 modules: headers, TLS, exposed files, libraries with known CVEs (prioritized with CISA KEV and EPSS), domain email (SPF/DKIM/DMARC) and more.

4. You get a PDF with the urgent items first and the fix next to each one, ready to hand to a client.

5. Plus a fix kit: one Markdown task per finding, so you can hand the whole thing to Claude Code, Cursor or Copilot.

What it never does: scan a domain you haven't verified, submit forms or write data, flood your server (150 requests max), or hide who it is.

Try it right now: type your domain at for an instant score out of 100, no signup. The full scan is US$29 one-time per domain, fix kit included.

Product Hunt perk:

Code PRODUCTHUNT takes 30% off your first 12 months on any plan, until Nov 30.

I'd love honest feedback: what would make you trust a security tool enough to run it on your own site?