AI tools let you ship a SaaS in a weekend. They don't check whether your Stripe key ended up in the frontend or your .git folder is still public. Paste your URL. Sumbrel runs 30+ checks from the outside (headers, TLS, DNS, shipped JavaScript, exposed files) and matches your libraries against 300,000+ known vulnerabilities. You get a score /100, and every issue comes with the exact prompt to paste into Cursor, Claude or Lovable to fix it. Passive by default. Free scan.