Scanfull

Scanfull is a security audit for websites and apps built with AI — Lovable, Cursor, Bolt, v0, Claude Code, Windsurf — and for regular code sites, including WordPress. We open your published site in a real browser, find whats exposed, and prove each flaw with evidence: the exact file, line, or endpoint. Then we hand you the fix — a ready-to-paste prompt for your AI assistant plus before/after code — and re-test to confirm the issue is closed. Checks span 13 families mapped to the OWASP Top 10 and CWE: exposed secrets and API keys, public databases (Supabase RLS), exposed files (.env, .git), security headers, cookies, CORS, TLS, email DNS (SPF/DMARC), vulnerable frontend libraries, resilience to overload/DDoS (CDN/WAF), and WordPress hardening. Free scan: security score, findings and an action plan — no sign-up. Full report: US$19.90 per site, one-time, re-test included. Scanfull is operated by Smart Data Invest LLC, Orlando, Florida, USA — serving customers worldwide.