Sample report — demo data
This is a preview. Run your own scan to see real results.
Security Audit Report
https://example.com
Executive Summary
This application has 2 critical security issues that need immediate attention before launch. The most urgent is an exposed Stripe secret key in the frontend bundle and a Supabase users table without RLS. Additionally, the app is missing a Content-Security-Policy header, which increases XSS risk. Overall, the app is not ready for production deployment.
Findings (10 Categories)
Cost Estimate
Estimated monthly cloud costs at scale: Vercel Pro ($20/mo) + Supabase Pro ($25/mo) + Stripe (~2.9% + $0.30/tx). At 1,000 users: ~$75/mo. At 10,000 users: ~$250/mo. At 100,000 users: ~$1,200/mo (may need dedicated DB).
Authentication Analysis
Authentication mechanisms detected: Supabase Auth + custom JWT (jsonwebtoken). Cookie security: missing Secure flag (2 cookies).
Performance & CDN
Cache strategy: no explicit Cache-Control. Compression: not detected. CDN: none. Render-blocking resources: 6.
Tech Stack Analysis
DeepScan AI detected the following tech stack: Next.js 15 (App Router), React 19, Tailwind CSS v4, Supabase (PostgreSQL + Auth), Vercel (hosting), Stripe (payments).
SEO & GEO Readiness
Meta description is present but too short (95 chars — recommend 150-160). Open Graph tags are missing image and description. No JSON-LD structured data found.
Scalability & Capacity
Single-server deployment on Vercel Pro. No database connection pooling. No CDN configured for static assets.
Fix Before Launch
- 1.Stripe secret key exposed in frontend — rotate your key immediately
- 2.RLS disabled on users table — all user data is publicly accessible
- 3.CSP header missing — XSS attack surface is open
- 4.Session cookies missing Secure/HttpOnly flags — auth tokens can be stolen
No credit card required · 1 free scan per month