Hi, I'm Stefan, the founder of ScanMySaaS. When you're building a SaaS quickly, getting it online and knowing what you exposed are two different jobs. I built ScanMySaaS to help founders review their public website and public GitHub repository in a form they can act on. The website scanner groups findings by severity and keeps the affected URLs. The public repository scanner checks secret patterns and risky code or workflow configuration, then gives you technical prompts to bring into Cursor, Claude, Codex or another coding tool. Your first website scan is free. I'd especially like feedback from people building their first SaaS with AI coding tools: which findings are useful, which are confusing, and what would help you verify a fix? This checks public signals and a bounded set of public repository files. Findings need verification; it doesn't test logged-in business logic or certify an app as secure. I'm here to work through real examples and improve the product.

ScanMySaaS

Security checks for websites and public GitHub repos

Security checks for websites and public GitHub repos