About LeakPatrol

AI tools like Lovable, Bolt, v0, Replit and Cursor let anyone ship a real app in an afternoon. That's brilliant, but those tools often put secret keys in the browser code, skip database security rules, or leave private files public. The app works perfectly, so nobody notices until a bill arrives or the data leaks.

LeakPatrol is a quick, free check for exactly those mistakes. Paste your app's address and in about a minute you get a grade from A to F, a plain-English list of what's wrong, and fixes you can paste straight back into the tool that built your app.

Who builds it

I'm Paweera, a Site Reliability Engineer based in the UK. My day job is keeping e-commerce websites fast and secure on Google Cloud and Kubernetes, and before that I spent several years as a Linux engineer at a large financial company. I built LeakPatrol after seeing how many AI-built apps ship with the same handful of avoidable security holes.

How we keep scans safe

• Read-only. We only fetch what any visitor's browser already downloads. We never log in, submit forms, or change or delete anything.
• Secrets are masked. If we find a key, we show only the first and last few characters and never store the full value.
• Private by default. We never publish anyone's results. If we ever notice a serious problem on a site, we tell the owner privately.
• Polite. Every request identifies itself as LeakPatrol, and scans are rate-limited.

Contact

Questions, feedback or a false alarm? Email hello@getleakpatrol.com. To report abuse of the scanner, email abuse@getleakpatrol.com.