Launching today
VibeLocked LeakCheck
Find the leaks in your AI-built app before strangers do
1 follower
Find the leaks in your AI-built app before strangers do
1 follower
LeakCheck scans your live Lovable, Bolt or Supabase app from the outside: exposed keys, open tables, RLS gaps, headers, CVEs, TLS and email spoofing. Free scan with your top 2 fixes. Pro rescans after every deploy and alerts you when a leak comes back.
Launch Team
Framer AI AgentsDesign and publish professional sites with AI
Promoted
Hi PH, I'm Karla. I checked 2,511 live apps built with AI coding tools, and 120 of the 603 with a Supabase backend returned real rows to anyone holding the public key (method: https://vibelocked.com/study/).
LeakCheck checks one live URL the way a stranger would. It only reads, never writes, and takes about 10 to 30 seconds.
Free: sign in with Google, scan your app, see every finding by title and full fixes for the top 2.
Pro, US$15 a month or US$144 a year (CA$20 a month in Canada): every finding in full with a fix prompt for your AI tool, up to 3 apps, a rescan after every deploy, daily, weekly or monthly rescans, and alerts by email, Slack or Discord.
Pro exists because a fix you made last week can be undone by the next prompt. I'd love feedback on false positives and on what you would want it to check next. Please only scan apps you own.