floweco.appGrade B

74/ 100

Critical

High

Medium

Low

Latest Findings

CRITICALExposed Supabase anon key in JS bundle

HIGHMissing HSTS header - MITM possible

HIGHCORS allows all origins on /api/user

MEDIUMCookies missing HttpOnly flag

LOWX-Content-Type-Options not set

Scanning myapp.io...

SSL Certificate100%

Security Headers100%

Secrets & Keys100%

CORS Config100%

DNS Security78%

Supabase RLS45%

GitHub Scanner

⚡

razazu/saas-app

142 files scanned

Hardcoded secrets3 found

Hallucinated packages1 found

PyPI dependenciesAll valid

Launch Checklist

✓SSL Certificate

✓Security Headers

✓DNS Security

✗Secrets Exposed

✗RLS Enabled

⚠Cookie Flags

✓

Green Light

Safe to launch - no critical or high findings

unpwned.io/api/badge/abc.png

UNPWNED

AI-POWERED VULNERABILITY SCANNER

Create account

Start scanning your domains for free

I have read and agree to the Terms of Service and Privacy Policy, including the Authorized Scanning policy (Section 3). I confirm I am 18+ years old.

OR CONTINUE WITH EMAIL

Already have an account? Sign in