Site Security Checker

Security Checks

Check Firebase config & rules Check Supabase config & RLS Check for exposed API keys Check for AWS credentials Check for .env file leaks Check HTTP security headers (CSP, HSTS, X-Frame-Options) Check cookie security (HttpOnly, Secure, SameSite)

Firebase & Supabase active write tests require domain ownership.

Passive read-only inspection runs automatically. To authorize database write testing, enter your domain verification passphrase.

Domain Passphrase

🔍 Site Security Checker

Security Checks

Firebase & Supabase active write tests require domain ownership.

Scanning for security issues...