Sniff Pup

SniffPup is a security-scanning service for websites and apps built with AI tools such as Lovable, Bolt, Cursor, Replit and v0. It also works with any public HTTP or HTTPS website. Its free, passive scans check what a visitor could see, looking for exposed API keys, public environment files, missing security headers, HTTPS and CORS issues, database exposure, email setup problems, and whether AI crawlers can access the site.

Reports explain findings by severity and include copy-and-paste fix prompts for popular AI coding assistants. Beyond website scans, SniffPup offers checks for public GitHub repositories, Stripe payment code, Supabase and Firebase security settings, database migrations, site speed, crashes and unused code. Free tools cover checks such as headers, source maps, database policies and exposed keys.

Users can review score trends, rescan findings, and export reports; paid options add full remediation steps, scheduled scans and deeper checks for verified sites. SniffPup also provides guides, checklists and resources for responding to leaked credentials