UNPWNED

UNPWNED is a passive web security scanner for indie hackers, vibe coders, and developers shipping AI-built apps. It scans your domain across 700+ security checks in under 2 minutes and detects leaked API keys, open endpoints, missing security headers, SSL/TLS issues, exposed config files (.env, credentials.json, SSH keys), Supabase/Firebase RLS misconfigurations, DNS auth gaps (DNSSEC, SPF, DKIM, DMARC), open API routes, dependency CVEs, and more. What makes it different: every finding ships with a copy-paste AI Fix Prompt tailored for Cursor, Claude, ChatGPT, GitHub Copilot, Lovable, Bolt, Replit, and v0. Scanner findings turn into one-shot fixes. Connect your GitHub repos for scheduled scans that detect 34+ secret patterns, vulnerable dependencies, and exposed config files, with auto-issue creation in your repo. Free to start (2 scans/month). Pro from $9/mo.