free leak check

Is my Lovable/Bolt app leaking secrets?

Paste your app's URL. We load only what any visitor's browser loads (the page and its JavaScript) and flag exposed secret keys, public source maps and missing security headers. Nothing about your site is stored.

Your app URL I own this app or am authorized to test it. The check is passive: no logins, no guessing hidden paths, and we never use any key we find.

Check my app

Limited to a few checks per hour. Keys we find are shown partly hidden. See the checker sections of our Privacy Policy and Terms. Site owners can opt out with User-agent: LockedVibeLeakCheck / Disallow: / in robots.txt.