PreFlight / website scanner
Website scanners
Start with the question your release needs to answer. These scanners cover security, indexability, AI visibility, launch readiness, and website health without pretending one automated check replaces a complete security review.
A route for the next question
Useful pages have a job to do.
Pick the page that matches the decision in front of you. Each brief explains the scope, the evidence to capture, the limits of automation, and the next action that makes the result useful.
Website Security Scanner
website security scanner: whether a public website exposes an obvious security or configuration weakness before visitors encounter it with a practical, evidence-led workflow for site owners and developers.
Free Website Scanner
free website scanner: which high-impact issues are visible from a public URL before committing to a deeper review with a practical, evidence-led workflow for builders who need a fast first pass.
Website Vulnerability Scanner
website vulnerability scanner: whether the reachable application surface contains a vulnerability signal worth escalating with a practical, evidence-led workflow for small teams responsible for a live web property.
Web Application Security Scanner
web application security scanner: how the browser-facing application and its public endpoints behave under a repeatable scan with a practical, evidence-led workflow for SaaS teams with APIs and customer workflows.
AI Application Security Scanner
AI application security scanner: whether an AI product has the web, API, secret, and operational controls needed for a safe launch with a practical, evidence-led workflow for teams shipping AI-enabled products.
Vibe-Coded App Scanner
vibe-coded app scanner: which fast-generated defaults could expose data, break payments, or hide a launch blocker with a practical, evidence-led workflow for developers shipping with Cursor, Claude, Lovable, Bolt, or another AI builder.
SaaS Security Scanner
SaaS security scanner: whether the paths that create accounts, accept payments, and serve customer data are ready for production with a practical, evidence-led workflow for indie hackers and SaaS operators.
Next.js Security Scanner
Next.js security scanner: whether a Next.js deployment exposes unsafe headers, client configuration, route gaps, or environment mistakes with a practical, evidence-led workflow for teams deploying Next.js applications.
Supabase Security Scanner
Supabase security scanner: whether the public application is relying on Row Level Security and credentials in the way the team expects with a practical, evidence-led workflow for builders using Supabase Auth, Postgres, Storage, or Edge Functions.
Firebase Security Scanner
Firebase security scanner: whether the deployed web surface reveals Firebase configuration or an access-control gap that needs review with a practical, evidence-led workflow for teams using Firebase Auth, Firestore, Storage, or Functions.
SEO Scanner
SEO scanner: whether search crawlers can discover, understand, and serve the pages that explain the product with a practical, evidence-led workflow for product teams trying to be found by search.
AEO Scanner
AEO scanner: whether answer engines can retrieve a clear, attributable answer from the public site with a practical, evidence-led workflow for brands that want useful answers to cite their site.
Website Health Check
website health check: what a visitor would experience right now and which issue should be fixed first with a practical, evidence-led workflow for operators who need one reliable public readiness signal.
Pre-Launch SaaS Audit
pre-launch SaaS audit: whether the critical customer path can sign up, pay, receive access, and recover when a dependency fails with a practical, evidence-led workflow for founders preparing a first production release.
Start outside-in
Find the issue. Prove the fix.
Run the free public audit before you connect providers. PreFlight shows the visible risk first, then helps you verify the workflows scanners cannot reach.