
UNPWNED
Scan your site for vulnerabilities. Fix them with AI
▤ Screenshots
About UNPWNED
UNPWNED is a passive web security scanner for indie hackers, vibe coders, and developers shipping AI-built apps. It scans your domain across 700+ security checks in under 2 minutes and detects leaked API keys, open endpoints, missing security headers, SSL/TLS issues, exposed config files (.env, credentials.json, SSH keys), Supabase/Firebase RLS misconfigurations, DNS auth gaps (DNSSEC, SPF, DKIM, DMARC), open API routes, dependency CVEs, and more.
What makes it different: every finding ships with a copy-paste AI Fix Prompt tailored for Cursor, Claude, ChatGPT, GitHub Copilot, Lovable, Bolt, Replit, and v0. Scanner findings turn into one-shot fixes.
Connect your GitHub repos for scheduled scans that detect 34+ secret patterns, vulnerable dependencies, and exposed config files, with auto-issue creation in your repo.
Free to start (2 scans/month). Pro from $9/mo.
Still not sure about UNPWNED?
Let your favourite AI do the thinking. Pick one and see what it says.
Reviews
Promoted
Upvote
More in Cybersecurity & Privacy
Upvote
Upvote
Upvote
Upvote
Upvote
Upvote
You may also like
Upvote
Upvote
Comments