Guides
Before you share the link: plain answers for apps built with AI tools
What strangers, Google and AI assistants can see from outside, how to check it yourself, and how to fix it. Each guide ends with a free check of your own app.
Leaked keys and files
- Is the Supabase anon key safe to show? Only if Row Level Security is onIn your report: Every Supabase table has Row Level Security
- Your secret keys are in your app’s JavaScriptIn your report: No secret keys in your public code
- Is your .env file downloadable? Check in one minuteIn your report: Your .env files can’t be downloaded
- An unrestricted Google API key can run up a billComing soon
Google and AI tools
- ChatGPT can’t see your app: why AI assistants get a blank pageIn your report: Your content exists without JavaScript
- Why your app isn’t on Google, and how to see what Google seesComing soon
Security basics and launch polish
- Security headers for an AI-built app, in plain EnglishComing soon
- Remove leftover starter branding: title, icon, share imageComing soon