BreachProbe scans an app you shipped with Lovable, Bolt, v0 or Supabase and tells you what it is serving the public. The free scan reads the shipped JavaScript for exposed keys, probes Supabase REST endpoints and checks security headers. The paid report adds what a passive scan cannot do: it signs up two throwaway accounts through your own signup endpoint and asks one, table by table, how many rows it can read. Read-only throughout, and every finding carries a written fix.