LaunchGuard

LaunchGuard scans a live app the way an outsider would, aimed at apps built quickly with AI tools. The free scan is read-only, needs no signup and usually finishes in under a minute. It crawls the pages, scripts and public endpoints it can find, tests database access, looks for leaked keys and shows the actual request and response when something is open. It reads up to 10 pages and you confirm you own the app or have permission to test it.

A one-time deep scan reads up to 60 pages, attempts writes and deletions through any opening it finds, and chains those openings together by reusing the identifiers it collects along the way to get at data that should be protected. It also provides a fix as a prompt written for your app that you paste into Cursor or Claude Code, then re-run the scan to confirm, followed by 30 days of monitoring with email alerts for high or critical changes.

Free tools include a Supabase scanner, a Firebase scanner, Leak Radar and a Ship Score, The site publishes research on exposed data in AI-built apps and explains how its scanning works. LaunchGuard is a hosted service with a one-time paid deep scan.