ReconAlert — Attack Surface Monitoring
See your business the way attackers see it.
Start new thread

ReconAlert — Attack Surface Monitoring - Find the security holes in your vibecoded app before hackers

by•
You shipped an app fast with Cursor, Lovable, Bolt or v0 — but AI code generators leave real holes: a Stripe key in your JS bundle, a Supabase table with no Row-Level Security, an open Firebase database. ReconAlert scans your live app for exactly these — it reads your actual JS bundle (not the empty shell a URL scanner sees), tests whether your Supabase RLS actually protects your data, and finds leaked keys, each with the one-line fix. Free to start.

Add a comment

Replies

Best
Maker
📌
Hey PH 👋 I'm a security engineer, and I kept seeing the same thing: AI-built apps ship fast and leak quietly. A Supabase table left world-readable. A service_role key in the frontend. A Stripe secret sitting in the JS bundle — findable with View Source. So I built ReconAlert to catch exactly those. It reads your app's real JavaScript bundle (not the empty shell a URL scanner sees), tests whether your Supabase Row-Level Security is actually protecting your data (read-only, using your own public key), and flags leaked secrets — each with the exact one-line fix. It's free to run on your own domain: reconalert.io/ai-apps Would genuinely love feedback from anyone shipping apps with Cursor / Lovable / Bolt / v0 — what's bitten you?