Check what shipped and what is in the code

Two complementary views: test a live-app URL, or review source from GitHub or a ZIP. Neither replaces the other.

Live app

Website URL

Check reachable pages, browser scripts and endpoints in a deployed app.

A URL scan does not read your private repository or prove every user-role permission.

View the live-app sample report

Source code

GitHub repository or source ZIP

Review supported source files, dependencies and configuration in a selected snapshot.

Source findings do not prove the same code is deployed or that an issue is exploitable in the live app.

View the fictional code sample report

Automated checks have coverage limits. No findings is not proof of security, and no longer detected is not a confirmed fix.