Built with Lovable, Bolt, Replit, Cursor or Claude Code? Find out if a stranger can see your users’ data, then fix it with one prompt to your AI.
- Checks
- 3
- On your own app
- ~15 min
You use your browser and the tool you built your app with. You don’t need to read or write code.
Can a second customer open the first customer’s page?
Sign up twice, in a normal window and a private one, and try to open one account’s page from the other.
Is your database locked?
See whether the lock that keeps strangers out of your data is switched on, in the tool you built with.
Is a secret key in your page?
Search your app’s page for secret keys that anyone could copy, and tell them apart from the keys that are meant to be public.
Every check you fail comes with one prompt to paste into your AI. It stops the damage, then you run the check again until it passes. At the end you get a result for your app and the module to open next.
Run the checks on your own app only. Testing an app that isn’t yours can be against the law.