SniffPup

SniffPup is a passive security scanner for websites and web apps you own, especially ones built with AI tools like Lovable, Bolt, Cursor and Supabase. Ask Claude to scan your site and SniffPup looks at it the way a stranger on the internet would: API keys or secrets showing up in your JavaScript, Supabase tables anyone can read, exposed files like .env or .git, missing security headers, and certificate and domain health. It's read-only. It never logs in, never changes anything, and never tries to break in. You get a 0 to 100 score, a link to the full report, and plain-English steps to fix each issue, so Claude can walk you through the fixes. Scans require you to confirm you own or have permission to test the site. The free scan needs no account. Paid SniffPup users can add an API token to list their sites and pull their latest results.