
Mozilla Observatory
Security Headers
Hardenize
Qualys SSL Server Test
Detectify
UptimeRobot
Sucuri Security Scanner
MxToolBox
Bleek.dev
Vibe App Scanner
Most apps built with AI tools ship with security holes their makers never see - a Supabase table anyone can read, a live API key sitting in the JavaScript bundle, no security headers at all. bleek finds them in seconds.
Paste your app's URL, and bleek runs 26 checks against it: leaked secrets, exposed databases (including the CVE-2025-48757 row-level-security class that hit a documented 10% of Lovable+Supabase apps), missing security headers, open environment files, cookie flags, TLS and email DNS. Each finding comes with a severity and a copy-paste fix written in plain English, not jargon.
The free scan needs no signup.
Mozilla Observatory
Bleek.devBased on our record, Mozilla Observatory seems to be more popular. It has been mentiond 36 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
You can check your site's security headers rating using the Mozilla Observatory. This tool analyzes your site's security headers and provides recommendations for improvement. - Source: dev.to / over 1 year ago
Here are a few tools you can use: Https://www.zaproxy.org/ (Web app scanner) Https://www.ssllabs.com/ssltest/analyze.html?d=importer.bilendo.de (SSL server test) Https://github.com/santoru/shcheck (Security Header Check) Https://observatory.mozilla.org/ (Content Security Policy validator). - Source: dev.to / almost 2 years ago
Regular Audits: Use tools like Mozilla Observatory or Security Headers to regularly check your headers. - Source: dev.to / almost 2 years ago
What's better about this vs. Mozilla Observatory. https://developer.mozilla.org/en-US/observatory (formerly https://observatory.mozilla.org/) Or Security Headers? https://securityheaders.com/ Or VENOM? https://github.com/oshp/oshp-validator Applaud the effort, these are things that more devs should be aware of when building websites... Hey some specific feedback... - Source: Hacker News / about 2 years ago
Mozilla Observatory — Find and fix security vulnerabilities in your site. - Source: dev.to / over 2 years ago
Security Headers - Quickly and easily assess the security of your HTTP response headers.
Vibe App Scanner - Security scanner for vibe coded and AI-built applications. Find vulnerabilities in apps built with Lovable, Cursor, Claude and other AI tools.
Hardenize - Hardenize provides a comprehensive and free assessment of web site network and security configuration.
Qualys SSL Server Test - This free online service performs a deep analysis of the configuration of any SSL web server on the public Internet.
Detectify - Detectify provides a user friendly and thorough web security scan that allows you to focus 100% on web development.
UptimeRobot - Free Website Uptime Monitoring