Decloak.dev
Decloak (decloak.dev) is a web security scanner for developers, agencies, and compliance teams - it scans 8 attack surfaces (exposed secrets, missing security headers, vulnerable JS libraries, TLS/DNS misconfigs, and AI-app-builder platform issues like exposed Supabase keys) and delivers a scored report in 15 seconds. Free tier, no card required.