Tool · scripted demo
A sample health scan. Not your app.
There is no URL field. We do not scan third-party apps without written permission. This panel replays a fixed script.
- Fetching production bundle doneOK
- Secrets in client code 1 service key foundCRITICAL
- Row Level Security 4 of 12 tables openCRITICAL
- Storage buckets 1 public bucketHIGH
- Auth: password reset flow okOK
- Backups never restoredHIGH
- p95 latency @ 50 users 2.8sHIGH
- Hosting bill drivers 3 levers foundINFO
Production readiness
This is a scripted demo. Your real assessment is done by an engineer, on your app, with your permission.
What each check means
- Fetching production bundle. We download the JavaScript the browser actually runs.
- Secrets in client code. A service key in the bundle can bypass your database rules.
- Row Level Security. Open tables let one user read another user's rows.
- Storage buckets. A public bucket can expose files that should stay private.
- Auth: password reset flow. Reset links should expire and return people to your domain.
- Backups. A backup only counts after someone restores it.
- p95 latency @ 50 users. This is sample timing, not a promise about your app.
- Hosting bill drivers. We look for usage that grows faster than your users.