Your vibe-coded site is live. Is it safe, legal and solid?
Deckproof grades any website from A to F in about 30 seconds: open databases, keys in the source, missing Impressum, trackers before consent, accessibility. Every finding comes with the text to paste back into the builder.
Try it below: mark findings fixed and watch the grade come back.
Four areas, one grade a non-developer can act on
Open Supabase and Firebase tables, keys and secrets in the source, exposed files, headers. Strictly read-only: it shows what a stranger can see, nothing more.
Impressum fields, privacy notice, Google Fonts, and a real browser that clicks the cookie banner to see what loads before consent. Facts and sources, never legal advice.
Titles, previews, sitemap, broken defaults the builder left behind, and the accessibility basics the BFSG cares about.
A prompt to paste into Lovable or Bolt, a re-check that earns the grade back, daily monitoring with alerts, and white-label PDFs for agencies.
From idea to a live product in two days
Scan engine, paywall, accounts, payments through Paddle, a headless-browser worker on my own server, German and English versions, PDF reports for agencies, and a full security audit of my own product. Free grade, then 9 EUR per report or 24 and 79 EUR per month.