Leadvesta
Start trial

Free, no card

Scan an app from the outside

Paste the public address of an app you own or are allowed to test. Leadvesta checks HTTPS, security headers, a few exposed files, and secret-looking keys in the JavaScript. If a Supabase URL and anon key are in the bundle, common tables are checked with a count header only. No database rows are downloaded.

If you leave an email, we add it to the Leadvesta list and tag it scan.

You are asking Leadvesta to scan an app you own or are allowed to test. The scan sends short, read-only requests. It does not sign in, change data, or download database rows.