Get a security and automation report from a URL or prompt
Paste a website URL, code, or the prompt that built an AI website, and get a detailed report. The scan finds keys leaked into the code, missing security headers, unprotected login cookies, insecurely submitted forms, Supabase tables without RLS permissions, and privacy issues under Israeli law. The AI then explains what is on the site, what to fix first in user management, and which automations will save you work. The URL scan is strictly passive, acting like a browser, and is only for your own website or with permission.
No. The scan is passive. It reads the page, server headers, and public JavaScript files exactly like a browser. It does not try to log in, does not send malicious input, and does not scan paths. Therefore, it finds what is visible from the outside and does not replace a professional penetration test.
Only your own website or a website you have permission to scan, which you confirm before the test. Even a passive scan of someone else's website to look for vulnerabilities is not an intended use of this tool.
A finding is determined during the scan itself, such as a key found in the code or a missing header. Something to check is an AI assessment based on what it sees, so it is marked as such and not presented as a fact.
That there is no service_role key in the code reaching the browser, and that every table in Supabase has RLS configured. You can paste the migrations SQL file in code mode, and the scan will tell you which tables are open.
No. It is sent for analysis, and the report comes back to you. We do not save the code or the report.
3 credits per scan, with daily free attempts for logged-in users.
Klix could not load
Try reloading the page first. If a new version just went out, a reload fixes it straight away.
If reloading did not help, your browser may be too old. Klix runs the tools on your own device rather than on a server, so it needs a browser from 2022 or later. What to do: update Chrome or Firefox, then open klixtools.com again.