Security Scanner for Replit Apps

We scanned 194 Replit apps. 2.1% had critical vulnerabilities. Is yours secure?

194apps scanned 4with CRITs 2.1%CRIT rate

Top issue: IDOR vulnerabilities leaking booking and health data

What we check on Replit apps

Supabase RLS — extracts real table names from your JS bundle, tests each with the anon key
API keys in bundles — OpenAI, Anthropic, Stripe, Google, AWS keys shipped client-side
Authentication — IDOR, OAuth misconfig, session entropy, JWT weak secrets
Infrastructure — exposed /.env, /.git, subdomain takeover, DNS issues
AI code quality — hallucinated functions, unsafe eval(), hardcoded credentials
70+ total modules — nuclei CVE templates, XSS, CORS, CSP bypass, and more

Paste your Replit app URL on our homepage for a quick 10-second scan. For the full 70-module audit, sign up — one free scan, no card.