Step 1 of 3

Scan your app

Enter the public URL of an app you own. Next, you'll prove ownership with a DNS record or a small file, then we run the scan.

• • Works with custom domains and builder subdomains (e.g. *.lovable.app).
• • Only read-only requests. We never write, delete or guess passwords.
• • We store findings, never your users' data.