Observed arrival · 2026-10-22
DeployWarden checks whether app security rules actually hold
A security-scanning service for apps built with Lovable, Bolt, Cursor, and v0, with a free passive scan and a paid, ownership-verified Deep Check.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Builders of Lovable, Bolt, Cursor, or v0 apps using Supabase
- Worth noticing
- Active tests require DNS TXT or a /.well-known file to verify ownership, plus the owner's consent.
Field notes
The page separates passive checks of a public app surface from tests that attempt cross-user access. It lists checks for leaked credentials in JavaScript, exposed .env and .git paths, source maps, TLS, and security headers. For its Deep Check, it describes using an anon key and two test accounts, with ownership established through DNS or a token file; the extracted page does not show a completed report.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
⊠LoginAccess appeared gated
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
ƒJavaScriptBrowser-side code central
One card from the complete issue