locaas Get early access
Security check

Check your application for risks

Use these tools to find common configuration errors before you launch your app.

Code scanner

You can paste your code or drop files into the browser to check for leaked keys without uploading anything.

Runs in this browser. Your code is never uploaded.

Website auditor

Enter your website address so we can read public security headers and HTTPS settings to find basic configuration gaps.

One normal visit to your home page. We read the settings your site already shows to every visitor.

Security scanning

Scans that go as deep as you need

Start with a free check and run deeper tests after you verify domain ownership.

Free, right now

Quick Check

One normal visit to your site checks HTTPS, security headers, cookies, email records and keys leaked in public JavaScript.

  • HTTPS and certificate status
  • Security headers and cookies
  • Public JavaScript key leaks
  • SPF and DMARC records
Run it now
After domain verification

Standard Scan

This scan checks for exposed configuration files, database access, and common vulnerabilities in your sign-in pages and admin routes.

  • Exposed .env and .git files
  • Database access tests
  • DNS takeover checks
  • Sign-in rate limits
Request early access
With repository access

Deep Review

Connect your code for a full dependency review and access control tests which result in fixes sent as pull requests.

  • Code and dependency review
  • Access control testing
  • Fixes as pull requests
  • Compliance mapping
Request early access
Every day

Continuous Watch

Daily monitoring tracks new advisories and changes to your public profile, which we summarise in a monthly report.

  • Daily outside-in checks
  • Advisory tracking
  • Immediate change alerts
  • Monthly summary reports
Request early access