Free website audit
Paste your site's URL and get an instant health score: exposed secrets, visible security flaws, performance. No access to your code.
We only read what is served publicly. No changes, no access to your source code.
What the free audit checks
A surface diagnosis, in seconds
The free audit inspects everything visible from the outside of your site. Here is what it checks automatically.
Exposed secrets
API keys, tokens and credentials left in the public JavaScript. The most common and most serious flaw in AI-built apps.
Security headers
CSP, HSTS, clickjacking and MIME-sniffing protection. The guardrails the browser enforces, or does not.
Session cookies
We check that your sensitive cookies are not readable by any script, to prevent session theft.
Performance
JavaScript weight, monolithic bundle, compression, caching. What makes your site slow on first load.
Exposed database
Direct database access from the browser and admin keys left in the client code.
Public source code
Exposed source maps that hand your entire client code to anyone who wants to read it.
Frequently asked
What people often ask.
Is it really free?
Yes. You paste your URL, you get a score and the issues found. No credit card, no commitment.
Do you access my code?
No. The free audit only reads what your site serves publicly (pages, scripts, headers). I never touch your repository or your server.
Can it break my site?
No. The free audit is read-only, like an ordinary visitor. It changes nothing and sends no data.
Does the free audit replace a full audit?
No. It sees what is visible from the outside. The manual audit opens the hood: your database, your access rules, your CI/CD, your tests, and what the AI hid under the rug.
Who is it for?
Founders who built their product with AI (Cursor, Bolt, Lovable, Claude) and want to know where they stand before something breaks.
Go deeper
The manual audit sees what the free audit can't
The free audit stops at the surface. The manual code audit inspects your server, your database, your CI/CD and your tests, with a prioritized report.
Explore the code auditGo further
Want the full diagnosis?
The free audit gives you the surface preview. The manual audit inspects your server code, your database and your access rules, with a prioritized report and a walkthrough call.
No-commitment call. We figure out together whether the audit makes sense for you.