Did your AI break your live app this week?
AppNightGuard watches your app while you ship: leaked keys, exposed files, broken pages, expiring SSL, deploy changes and signup/checkout flows. One email about what changed, with fix prompts.
$ appnightguard scan https://my-app.lovable.app ✓ uptime 200 in 182 ms ✓ ssl 74 days until expiry ✗ secrets sk_liv…9QxF (107 chars) in /assets/index.js ✗ exposed /.env publicly readable ! headers CSP, X-Frame-Options missing ! deploy new env var VITE_STRIPE_SECRET score 58/100 · 2 critical · 2 warnings
Free passive scan
What we check
Leaked keys
Stripe, OpenAI, AWS and Supabase service_role keys found in your HTML and JS bundles, always masked.
Exposed files
Public /.env, /.git and production source maps that hand out secrets and source code.
Headers & SSL
HSTS, CSP, clickjacking and nosniff headers, plus certificate expiry before it bites.
Uptime & broken pages
Error pages, blank builds and slow responses from the AI's latest edit.
Deploy-change alerts
New JS bundles, routes, third-party scripts and VITE_ / NEXT_PUBLIC_ env vars since last scan.
Signup & checkout tests
Your own steps, replayed in a real browser on verified apps, so you know the money path still works.
Diff report email
One email: what's new, what's fixed, what's still open. No dashboard babysitting.
Copy-paste fix prompts
Every finding ships with a prompt for Lovable and one for Cursor.
Pricing
First scan free. Then prepaid check packs, no subscription.
Free
- Anonymous passive scan, no sign-up
- Secrets, exposed files, headers, SSL, uptime
- +1 free check when you create an account
10 checks
- 10 credits · 1 credit = 1 check
- Manual scans, weekly scheduled scans, flow test runs
- Deploy-change alerts & email diff report
- Lovable & Cursor fix prompts
50 checks
- 50 credits · $0.58 per check
- Everything in the 10-check pack
- Up to 10 apps, 5 flow tests per app
- Best for several apps