Hey Product Hunt 👋 I'm Adam, and I built StackSiren. Tools like Lovable, Bolt, Replit, Cursor and v0 make shipping an app incredibly fast, but they also make it easy to ship with an API key sitting in your frontend, Supabase tables without row-level security, or no security headers at all. StackSiren runs a passive, non-intrusive scan of your live app. It doesn't attack anything, it just looks at what anyone on the internet can already see. Then it gives you a security score and a plain-English fix guide for every issue it finds. The first scan is free. Paid plans add automatic rescans, so you'll know if a new deploy breaks something. I'd love your feedback: what would you want a scanner like this to check that it doesn't yet? I'll be here all day answering questions.

StackSiren

Security scans for apps built with Lovable, Bolt and Cursor

Security scans for apps built with Lovable, Bolt and Cursor