Skip to content
SealMyApp

About SealMyApp

SealMyApp finds the security holes in apps built with AI app builders such as Lovable, Bolt, Cursor, Replit and v0, shows you how to fix them, and keeps checking so they stay fixed.

What we do

AI builders make it quick to ship a real app, and just as quick to leave a database readable by anyone or a secret key in the browser. Most people building this way aren't security specialists, and each new AI edit can quietly undo an earlier fix.

  • Free scan: a security score, issue counts and your most serious issue explained in full.
  • Fix Pack (£29 one-off per app): every issue in full, with copy-paste fix prompts for your builder, Supabase SQL policies where relevant, and a re-scan to confirm each fix.
  • Watchdog (£9 per month per app): a daily re-scan and an email with a fix prompt if something new or re-opened turns up.

We also publish free guides, builder-by-builder security pages and tools such as the key checker and the Supabase RLS audit.

How scans stay safe

  • Only apps you own. Before any scan you prove control of the app with a DNS TXT record or a small file at /.well-known/sealmyapp.txt. Watchdog checks that proof is still there before every re-scan.
  • Read-only. We only make GET and HEAD requests within a fixed request budget. We never write, delete, sign in or try to guess passwords.
  • We don't keep your users' data. To prove a table is readable we fetch at most one row, keep only the table and column names, and discard the row. Secret keys we find are masked before anything is stored.
  • Honest findings. Keys that are public by design, such as the Supabase anon key or a Firebase web config, aren't reported as critical. Where data might be public on purpose, we ask rather than assume.
  • Clear limits. We check from the outside, so a clean result means our checks found nothing, not that an app is guaranteed secure.

Read more in our privacy policy and terms.

Who we are

SealMyApp is a trading name of Richmond Capital Holdings Ltd, a company registered in England and Wales (company no. 17137348). Registered office: Halsey House, 18a Milner Street, London SW3 2PU. SealMyApp is independent and isn't affiliated with any of the app builders we mention; their names are trademarks of their owners.

Contact

Email hello@sealmyapp.com. We read everything, including security reports about SealMyApp itself.