Free scan
$0
- Score and grade
- How many issues, by severity
- The top one or two issues, explained
Before a customer pays you
Find leaks before they cost you money or trust.
AppVitals reads the public pages of a site you own. It looks for a leaked key, an open database, and payment or customer details left in the open. If your app takes money or personal data, those mistakes are how a stranger gets in. This is an automated check, not a certification.
- A key left in the page can let someone act as your app.
- Customer lists and payment details should not be public.
- When people can't trust the app, they don't pay, and they don't come back.
Why keep checking
An AI edit can change the app any day. A new issue does not always show an error. It just sits there.
- Each edit can open a door that was closed yesterday.
- Register a site once. Every week we scan it again and email the full report.
- If the score drops, or a new high or critical issue appears, an alert goes out right away.
Why not just ask an AI to audit it?
An AI chat or agent can help. It is a different kind of check.
- Ask again, and the checks and the conclusion can change.
- It can miss something real, or describe an issue that is not there.
- There is no fixed baseline, so last week and this week are hard to compare.
- AppVitals runs the same checklist the same way every time, like a health checkup. The result repeats, you can compare it week to week, and you can see whether you got better.
AI is great at reading code. AppVitals checks the live site from the outside, with one consistent standard. The two work better together.
Sample report
Pricing
Start with a free scan. The one-time report is a $9 launch price. A monthly plan watches the site after that.
One-time report
$9 launch price
- Every issue explained
- A copy-paste fix prompt for each issue
- The order to fix them
- One re-scan after you fix them
- Full report for 1 site
- 1 re-scan after you fix it
Recommended
Pro
$29 per month
- 30 full reports a month. Automatic scans count.
- Up to 3 sites. Register each site once.
- Set it and forget it. Each week we re-scan every registered site and email the full report.
- An immediate email if the score drops or a new high or critical issue appears.
- You can still run a scan yourself. It uses the same monthly count.
Agency
$99 per month
- 200 full reports a month
- As many sites as you need
- A private link you can send to a client
- Set it and forget it. Each week we re-scan every registered site and email the full report.
- An immediate email if the score drops or a new high or critical issue appears.
- You can still run a scan yourself. It uses the same monthly count.
If we do not deliver the report, ask for a refund within 7 days through the contact form.
Monthly plans cancel in the billing portal. The plan stays on until the paid period ends.
Cancel or manage a monthly plan · Questions and refunds go through the contact form. We do not publish an email address. Contact · Refunds · Terms
The free scan stays free. Want help?
Scan a site you own
Three steps
- Paste the URLAny public https address.
- Get a scoreA grade, and what to fix.
- Paste the fixesCursor, Lovable, or Claude Code.
Built for
- Cursor
- Lovable
- Bolt
- v0
- Replit
- Claude Code
The file you download
# AppVitals fix instructions Paste this file into Cursor. ### 1. Other sites could sneak scripts into your pages Content-Security-Policy is missing **Fix:** Add Content-Security-Policy to every HTML response.
Short answers
What gets checked?
Public pages, scripts, and headers, plus files or keys a stranger can already request.
What stays hidden?
Your repo, database rules, and dashboards at Supabase, Firebase, Stripe, or Vercel.
Will you edit my app?
No. Paste the file into your AI tool and let that tool edit.
How fast is it?
Usually within 10 seconds. We only read, and we don't save the pages.
Can you check a mobile app?
Choose App, then Backend keys or an API address. We only read. We don't save keys or responses.