Skip to content

The problem list is free. A fix prompt for each one is $9.

See pricing
Vibe App Watchdog

Replit

A Replit deploy is a normal website

The workspace is not what visitors get. The deployment URL is. We do not use the Replit API.

  • Secrets that were pasted into client code

    Server secrets that stay in Replit's environment are outside this scan. The same value copied into a script the page loads is in scope.

  • Headers from whatever serves the deploy

    Missing Content-Security-Policy, HSTS on HTTPS, nosniff, Referrer-Policy, or framing protection show up as findings.

  • Public env or git files

    Five fixed paths, one request each. An HTML shell is not counted as a leaked env file.

After the list, Watchdog Monitor is $9/mo for a weekly re-check of that same URL and an email when the grade or the issue list changes.

Scan a URL you own

The same free check as the homepage. You confirm the app is yours before it runs.

Free public scan

After the results

Monitor weekly: $9/mo

The free scan lists what is already public. Watchdog Monitor re-checks that app every week and emails the grade, plus what is new or fixed. Fix prompts stay a separate $9 one-time unlock on the report.

Monitor weekly: $9/mo

Run the free scan first. The monitor button is on the report.

Is Replit secure? →