Observed arrival · 2026-10-19
LeakyVibe checks no-code apps for exposed secrets
A free, no-sign-up scanner that checks a live app for exposed keys, database access issues, security settings, SEO basics, and broken links.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Lovable, Bolt, v0, Replit, and Cursor app builders
- Worth noticing
- The homepage describes read-only checks, including up to 20 homepage links, and says scans never log in or submit forms.
Field notes
The listed checks range from secrets and exposed files to Supabase or Firebase table access, HTTPS, content-security policy, and basic search visibility. The page illustrates its report format with a hypothetical exposed-orders-table finding and a suggested prompt for enabling Row Level Security; it explicitly says the example is not from a real customer. Its explanation is aimed at fixing issues by pasting prompts into tools such as Lovable, Bolt, or Cursor.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue