Paste your live app's URL. Burnproof finds the OpenAI, Gemini, Anthropic, Stripe or Supabase service_role keys your AI-built app ships to the browser. Read-only, keys masked, every finding free, plus a fix prompt for Cursor, Lovable or Bolt.