Paste your live URL. SniffPup passively checks web apps built with Lovable, Bolt, Cursor, Replit or Supabase for leaked keys, public .env/.git files, source maps, missing headers and open Supabase/Firebase reads. Read-only. Every critical fix is free.