floweco.appGrade B

74/ 100

2

Critical

3

High

7

Medium

12

Low

Latest Findings

CRITICALExposed Supabase anon key in JS bundle

HIGHMissing HSTS header — MITM possible

HIGHCORS allows all origins on /api/user

MEDIUMCookies missing HttpOnly flag

LOWX-Content-Type-Options not set

Scanning myapp.io...

SSL Certificate100%

Security Headers100%

Secrets & Keys100%

CORS Config100%

DNS Security78%

Supabase RLS45%

GitHub Scanner

⚡

razazu/saas-app

142 files scanned

Hardcoded secrets3 found

Hallucinated packages1 found

PyPI dependenciesAll valid

Launch Checklist

✓SSL Certificate

✓Security Headers

✓DNS Security

✗Secrets Exposed

✗RLS Enabled

⚠Cookie Flags

✓

Green Light

Safe to launch — no critical or high findings

unpwned.io/badge/abc123

unpwned

AI-powered vulnerability scanner for your domain

Create account

Start scanning your domains for free

or continue with email

Already have an account? Sign in