Daily checks
Monitor
$19/month
One app, checked every day. Passive scan plus the flows you record.
- 1 app
- Checked once a day
- Passive scan and recorded flows after domain verification
A smoke alarm for your AI-built app.
Your AI-built app worked when you shipped it. Does it still?
Paste the URL. The free check reads the public site and tells you, in plain English, what a stranger can already see. Paid monitoring rechecks it once a day.
Free public check
One click. Public pages only. We do not submit forms or log in unless you later verify the domain.
One click. Public pages only. We do not submit forms or log in unless you later verify the domain.
Works with
- Lovable
- Bolt
- Cursor
- Replit
- v0
Three steps
1. Check the public site
Paste a URL. The free check reads the homepage, scripts, TLS, headers, robots.txt, and sitemap. It does not log in.
2. Verify, then record a flow
On a paid plan, prove the domain with DNS, a meta tag, or a file. Then save visit, fill, click, and expect-text steps with a test login.
3. Hear about a new failure
Both paid plans run once a day. We email you when a check that passed, or had not been seen, starts failing.
Five apps, plus a weekly leak pass
Watch
$49/month
Five apps, checked every day, plus a weekly pass for leaked keys.
- 5 apps
- Checked once a day
- Passive scan and recorded flows after domain verification
- Weekly pass for leaked keys
Questions
What does the free check actually do?
It reads the public site only. That covers whether the homepage responds, TLS, security headers, known secret shapes in public JavaScript, one read if a Supabase or Firebase config is public, robots.txt, and sitemap.xml. It does not submit forms or sign in.
How is Monitor different from Watch?
Monitor is $19 a month for one app, checked daily, including a flow you record after domain verification. Watch is $49 a month for five apps, also checked daily, plus a weekly pass that looks harder for leaked keys. Neither plan checks more than once a day.
When do you drive a browser?
Only after you verify the domain and only on a paid plan. The flow stays on that hostname. Test passwords are encrypted before they are stored. You can also press Run now in the dashboard.
Can I cancel?
Yes. The Stripe customer portal cancels the renewal. A partial month is refunded only when the law requires it.
Is this a security audit?
No. It is a smoke alarm for a few specific failures. A check can miss something real or flag something that is fine.
Check the public site before you guess.
The free check needs no account. Monitoring starts after you sign in and pick a plan.