One question, one URL, one answer. Each tool runs the same passive free scan and shows you the part that answers your question.
Check if anyone can download the .env file from your live site. Free, passive, one URL. For Lovable, Bolt, Replit, Cursor and Vite apps.
Did I ship a dev server?Check if your live site is running the Vite dev server instead of a production build. Free, passive, one URL. No exploit testing.
Is your Supabase app exposing more than it should?Free check for Supabase apps: is a key that bypasses Row Level Security in your public code? Plus a one-minute self-test for your tables.