Launched this week
Auditly
Find the security holes in your site before attackers do
1 follower
Find the security holes in your site before attackers do
1 follower
Auditly checks your site the way an attacker would: exposedenv andgit files, API keys in your JavaScript, open Supabase tables, weak headers, vulnerable libraries. Verify your domain, get a PDF with the urgent issues on top and the fix next to each one.
Free Options
Launch Team / Built With
Render Sandboxes: a computer for every agentRun untrusted code safely. Idle sandboxes cost nothing
Promoted
Hello Product Hunters! I'm Oscar Quintero, a graphic/web designer turned solo developer, based in Canada🍁.
I built Auditly after looking at sites shipped in a hurry (a lot of them vibe-coded) and seeing the same problems again and again: API keys sitting in the JavaScript, a .env or .git/config open at the root, Supabase tables anyone can read. None of it needs hacking. Just looking.
How it works:
1. You verify you own the domain (TXT record or a file). Nothing is tested before that.
2. A real browser crawls the site, so React, Next and Vue apps get checked too.
3. 18 modules: headers, TLS, exposed files, libraries with known CVEs (prioritized with CISA KEV and EPSS), domain email (SPF/DKIM/DMARC) and more.
4. You get a PDF with the urgent items first and the fix next to each one, ready to hand to a client.
5. Plus a fix kit: one Markdown task per finding, so you can hand the whole thing to Claude Code, Cursor or Copilot.
What it never does: scan a domain you haven't verified, submit forms or write data, flood your server (150 requests max), or hide who it is.
Try it right now: type your domain at auditlyscan.com/free-scan for an instant score out of 100, no signup. The full scan is US$29 one-time per domain, fix kit included.
Product Hunt perk:
Code PRODUCTHUNT takes 30% off your first 12 months on any plan, until Nov 30.
I'd love honest feedback: what would make you trust a security tool enough to run it on your own site?