Observed arrival · 2026-10-27
Cobalt Owl checks AI-built apps for leaks
A security scanner for apps made with tools such as Lovable, Bolt, Cursor, Replit, and v0, checking what a stranger can see from the outside.
- For
- People shipping apps with AI coding tools
- Worth noticing
- Its example scan lists a readable Supabase table with 1,284 rows, while saying it counts rows but reads none.
Field notes
The homepage presents an outside-in scan: owners paste a live URL and affirm authorization; it says it needs no code access or passwords and reads no database rows. Its sample output lists a publicly readable Supabase table with 1,284 rows, a masked OpenAI key in JavaScript, and missing browser protections. The page also describes Owl Watch as a recurring monitor that rescans daily and after detected changes, but those capabilities are presented as product claims.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue