SniffPup
Free passive security scan for vibe-coded web apps.
Free passive security scan for vibe-coded web apps.
This page is designed to help you find out whether SniffPup is good and if it is the right choice for you.
Listed in
Leaked API key detection
Finds API keys and secrets exposed in page HTML and JS bundles
Exposed .env / .git file check
Checks for publicly reachable .env and .git files
Source map exposure check
Checks for public source maps
Security headers check
Checks security headers
Cookie security check
Checks cookie flags
SSL/TLS check
Checks HTTPS and TLS certificate
CORS check
Checks CORS configuration
Email DNS (SPF/DMARC) check
Checks SPF and DMARC records
Supabase / Firebase open-read check
Checks whether an anonymous visitor can read data
No-signup free scan
Free scan needs no signup
AI fix prompts
Copy-paste fix prompts for AI builders
PDF / Markdown reports
Downloadable reports
Scheduled re-scans / monitoring
Ongoing re-scans on paid plans
SniffPup is made for people shipping apps built with AI builders such as Lovable, Bolt, Cursor, Replit and v0, often with Supabase or Firebase backends, who want a quick outside check of their live web app's public URL.
SniffPup is a passive, read-only outside security scan of a live web app's public URL. The free scan needs no signup, and it never logs in, sends attack payloads, or uses a key it finds. It checks for leaked API keys and secrets in page HTML and JS bundles, publicly reachable .env and .git files, public source maps, security headers and cookie flags, HTTPS/TLS, CORS, email DNS (SPF/DMARC), and whether Supabase or Firebase lets an anonymous visitor read data. It also gives copy-paste fix prompts for AI builders, and critical fixes are free. It is not a pen test or code audit.
SniffPup's free scan needs no signup, is passive and read-only, and critical fixes are free. It includes copy-paste fix prompts for AI builders. Only scan sites you own or are authorized to test.
SniffPup is made by Ember and Saru LLC in Charlotte, NC, USA. It is named after Ember, the founder's black Pomeranian.
We have collected here some useful links to help you find out if SniffPup is good.
Check the traffic stats of SniffPup on SimilarWeb. The key metrics to look for are: monthly visits, average visit duration, pages per visit, and traffic by country. Moreoever, check the traffic sources. For example "Direct" traffic is a good sign.
Check the "Domain Rating" of SniffPup on Ahrefs. The domain rating is a measure of the strength of a website's backlink profile on a scale from 0 to 100. It shows the strength of SniffPup's backlink profile compared to the other websites. In most cases a domain rating of 60+ is considered good and 70+ is considered very good.
Check the "Domain Authority" of SniffPup on MOZ. A website's domain authority (DA) is a search engine ranking score that predicts how well a website will rank on search engine result pages (SERPs). It is based on a 100-point logarithmic scale, with higher scores corresponding to a greater likelihood of ranking. This is another useful metric to check if a website is good.
The latest comments about SniffPup on Reddit. This can help you find out how popualr the product is and what people think about it.
A free SniffPup scan of your live URL runs these outside checks: secrets in your HTML and same-origin JS (always masked), public .env/.git files (variable names only, never values), downloadable source maps, security headers and more. It's passive: about 60 requests or fewer, no logins, and it never uses a secret key it finds. It can't see your repo, your server code or anything behind a login, and it doesn't scan... - Source: dev.to / 1 day ago
These examples are a starting point, not a review of your app. Got a pattern we missed? Tell us: https://sniffpup.com/suggest. - Source: dev.to / 1 day ago
Do you know an article comparing SniffPup to other products?
Suggest a link to a post with product alternatives.
Is SniffPup good? This is an informative page that will help you find out. Moreover, you can review and discuss SniffPup here. The primary details have been verified within the last quarter. So they could be considered up to date. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.
