Scout is a security scanner for AI-built and vibe-coded apps. Upload your code or connect your repo — Scout runs 51 deterministic security probes inside an isolated sandbox, then a multi-agent AI review reads your actual code and adversarially verifies every finding, so what reaches you is a short list of what's genuinely wrong — each with a copy-paste fix, an honest A-to-F grade, and the option to let Scout rewrite the broken code for you and re-scan to prove it.
No lock-in — pay per scan (Free / $1 / $10 / $100) or subscribe for monthly credits that stack. Probe findings in seconds, the deep review in ~30–60 min — and fixes that re-scan clean.
profiles
SCT-0042
of audited Lovable apps shipped with Supabase Row Level Security disabled — the CVE-2025-48757 class.
is all it takes to leak an API key. Client-side secrets are the single most common critical finding.
dependencies are a real supply-chain vector — AI imports packages that don't exist until someone malicious registers them.
AI tools are extraordinary at making things work and indifferent to making them safe. They'll wire your database to the internet with auth off, embed secrets in the client bundle, and pull a dependency that was deprecated for an RCE two years ago — and the app runs perfectly. You can't see these by using your app. Neither can your users. Attackers can.
Runs 51 deterministic probes over your code inside an isolated sandbox — secrets, injection, IDOR, crypto, JWT, CORS, Docker/IaC — tuned for the exact ways AI tools break things. Then it does the part a rule list can't: a multi-agent AI review reads your code like a senior pentester, with specialist reviewers hunting different vulnerability classes in parallel and an adversarial verify pass whose only job is to disprove each finding before it reaches you. What survives is written in plain English with a concrete fix — ranked from the account-takeover you fix right now to the hardening that can wait.
Scout is an assessment tool, not an attack tool. It reads code you upload — it never touches your running app. Live testing is coming soon and is not included today; when it ships it will run only against apps you've verified you own. No exploitation, ever.
Drop a zip, paste a repo URL, or connect GitHub read-only. Scout auto-detects your stack and picks the right probes. No config, no CI setup, no agent to install.
Your code is read inside an isolated gVisor sandbox whose only outbound route is our AI provider for the review itself — nothing else in your code can call home, and no scan can reach another customer's. 51 deterministic probes land in seconds; the multi-agent review takes ~30–60 minutes.
Every candidate finding faces an adversarial verify pass that tries to disprove it, then survivors are merged, re-scored for your stack, and written up with a copy-paste fix and an A–F grade. Apply the fixes yourself, or let Scout rewrite the code and re-scan to prove the grade.
Security tools are noisy — that's why most people ignore them. Every Scout finding survived an adversarial verify pass built to disprove it, then deduplication and severity re-scoring, before you ever saw it — written so you can fix it without a security background.
profiles table
SCT-0042
Your database will hand any logged-in user — or here, anyone with your public anon key, which is visible in your JavaScript — every row in profiles: emails, names, everything. This is the same misconfiguration behind the 2025 mass Lovable exposures.
Written for the person who built the app, not for a security team.
Exact file and line for every claim — so you can verify it, not just trust it.
The fix is a copy button. Apply it, re-scan, watch it turn green.
Every finding says whether a probe or the AI review caught it — and how confident we are.
A report you can't act on is just anxiety. Run the auto-fix and Scout copies your codebase, rewrites every broken section itself, and re-scans the rewritten copy to prove the grade actually moved. The new grade is whatever that second scan earns — so you never get a fix that leaves the vulnerability behind, and never a number we made up.
Your original repo is never touched. Scout rewrites a copy and hands you a clean version plus a diff of exactly what changed and why.
Every finding's fix is applied for real — owner checks, escaped output, fail-closed secrets, headers, validation — kept behaviour-preserving so the app still works the same.
The rewritten copy goes back through a full scan, so the new grade is earned, not estimated. On the $100 Audit, if it isn't an A yet Scout fixes again and re-scans — up to three passes. $10 Deep takes up to two. Free & $1 get one expert pass.
We fix until it earns an A. The rewrite is included, and Scout keeps fixing and re-scanning — up to three passes — until a fresh scan comes back an A. If a repo genuinely can't reach an A in three passes, you keep the best-effort rewrite plus an honest report of what's left.
Two passes, best effort to an A. Scout rewrites the flagged code, re-scans it, then takes a second pass at whatever's left — stopping early the moment it earns an A. That's two scans of your code minimum, and the fix is included in the $10. We don't promise the A here: if it lands, it's earned on a real re-scan; if it doesn't, you keep the rewrite plus an honest report of what's left.
One expert fix pass: Scout rewrites the flagged code and re-scans it, so the new grade is earned on a real re-scan, not estimated. The fix isn't included at these tiers — you unlock the verified rewritten code with credits.
Unlocking a rewrite costs 1 credit per 10 findings (1–5 credits), so a big messy project costs a little more than a tiny one — and you always see the exact quote before you spend anything. On the $10 and $100 tiers the rewrite is already included, no credits needed.
No per-seat math, no "contact sales." Everything runs on credits: buy a scan when you need one, or subscribe for a monthly bundle that stacks. Every tier — including free — returns real findings.
Free$0See what Scout sees |
Standard$1/scanThe coffee-money audit |
Deep$10Run this before you launch |
Audit$100The full workup |
|
|---|---|---|---|---|
| Letter grade (A–F) + full findings report | ✓ | ✓ | ✓ | ✓ |
| Full deterministic probe scan — secrets, injection, IDOR/access-control, crypto, JWT, path traversal, CORS, Docker/IaC & more (51 modules) | ✓ | ✓ | ✓ | ✓ |
| Hardcoded secrets & keys | ✓ current files | ✓ full history | ✓ | ✓ |
| Client-side / bundle secret exposure | ✓ | ✓ | ✓ | ✓ |
| Vulnerable dependencies (CVEs) | ✓ critical only | ✓ all severities | ✓ | ✓ |
| Supabase RLS & Firebase rules audit | ✓ | ✓ | ✓ | ✓ |
| Security headers | ✓ | ✓ | ✓ | ✓ |
| Hallucinated / typosquat dependencies | ✗ | ✓ | ✓ | ✓ |
| AI code review — a reviewer reads your actual code, not a rule list | ✗ | ✓ single reviewer | ✓ multi-agent | ✓ multi-agent |
| AI triage — plain-English findings & fixes | criticals + top 3 | ✓ | ✓ | ✓ |
| API authorization / IDOR analysis | ✗ | ✓ | ✓ | ✓ |
| Cloud / IaC / Docker config | ✗ | ✓ | ✓ | ✓ |
| AI-agent review — prompt injection & tool scope | ✗ | ✗ | ✓ static | ✓ |
| PDF one-pager & SARIF export | ✗ | ✗ | ✗ | ✓ |
| Mobile app source (React Native, Flutter, Swift, Kotlin) incl. Android manifest / iOS ATS / secure-storage & WebView checks | ✓ | ✓ | ✓ | ✓ |
| Live web testing (DAST — XSS, SSRF, fuzzing) — coming soon, not included today | ✗ | ✗ | ✗ | ✗ |
| Live AI-agent jailbreak & injection red-team — coming soon, not included today | ✗ | ✗ | ✗ | ✗ |
| Post-fix grade — earned on a real re-scan of the rewrite, never projected | with fix unlock | with fix unlock | ✓ | ✓ |
| Auto-fix — Scout rewrites & re-scans your code | credits | credits | ✓ included | ✓ included |
| Fix guarantee | 1 pass | 1 pass | best effort to A 2* passes | iterates to A 3* passes |
| Start free | Run $1 scan | Run Deep | Book an Audit |
* Up to that many rewrite/re-scan passes — Scout stops early the moment a fresh scan earns an A.
A subscription never “unlocks” features — it grants credits, and credits buy everything. Bundles land monthly and stack: skip a month of scanning and they bank up. Deep & Audit credits keep for two years; fix credits never expire.
Prefer one-time? A single Deep credit is $10, a single Audit credit is $100 — both on the Plans page.
Separate from per-scan pricing. Credits unlock the verified rewritten code on Free & $1 scans — 1 credit per 10 findings (1–5 per fix). Already included on $10 & $100. Bigger packs stack bonus credits, and credits never expire.
Buy credits → · fix credits also cover $1 Standard scans (1 each) · Deep & Audit plans →
These aren't mockups. Every tile is an app we actually built and ran through Scout — drag the wall, click any one to open its full report: the grade, every finding, the exact fix. False positives already stripped.
1 credit per 10 findings, 1–5). The post-fix grade only exists once the fix has actually run — and when it does, it's the result of that real re-scan, never a projection.Every scan runs in an isolated gVisor sandbox with one outbound route: our AI provider, for the review. Nothing else in your code can call home, and no scan can reach another customer's.
Your code sits in a per-scan working directory only your scan can read. Code and report are both deleted at expiry — 7 days Free, 30 days paid — or instantly when you hit Delete.
Your code and your findings never enter a training set. Anthropic runs Scout on a no-train, zero-retention plane. They're yours.
Scout reads code and explains what's wrong. It never touches your running app and never exploits anything.
Every finding says whether a probe or the AI review caught it, and how sure we are. We'd rather tell you what we don't do than oversell what we do.
Sign in with GitHub, point Scout at a repo, and get real findings in seconds. If everything's clean, you'll sleep better. If it isn't — better you than someone else.
Run a free scanSign in with GitHub · Subscribe or pay as you go · The free tier never needs a card