Terms of use
Check only what is yours
You may use this service only on sites you own, or sites whose owner has given you written permission to test. By starting a check you confirm that this is the case.
Checking someone else's site without permission breaks these terms and is illegal in most countries. We log the addresses submitted and will act on abuse.
What the check is
We look at your site from outside, without logging in. This finds a specific and useful class of problems — leaked keys, open databases, missing locks, forgotten files.
It is not a full security audit. It cannot see your source code, your infrastructure, or what happens after a user signs in. A clean result means our checks found nothing, not that your app is perfect.
No guarantee
We report what we find. We cannot promise we will find everything, and we are not liable for problems we did not detect, or for damage resulting from how you act on our report.
Fixes are applied by you or by your AI tool. Always review changes before deploying them.
Refund
If a paid check finds no problems, we refund the $10. You keep the report.