I built a free app security scanner

Hey all,

This is kind of a giveaway from me for founders building on Bubble.

Some background:

I audit, build and migrate Bubble apps regularly. A big part of that is checking apps before they go to market or run ad campaigns. And I’ve saved founders a lot of money, time and trouble with it.

I do them manually and report the steps to go from the current state to where the app needs to be to go live. I have a big list of things I check, and frankly I got tired of doing some of them myself :man_shrugging:.

So I turned the first stage of my audits into a tool and put it up for free.

You give it your Bubble app URL and prove ownership, it looks at the things that could go wrong on the security/privacy front and reports back. It checks for:

  • data a logged-out visitor can see
  • admin and dashboard pages that open for anyone
  • actions that can edit or delete data with no login
  • exposed secret keys
  • any vulnerability on your app’s test version
  • weak password rules and visitor data going to trackers (for GDPR stuff)

You receive a PDF report via email.

Link: BlurStudio.ai/scan

Two things I should be clear about:

  1. I do this commercially, so if the report worries you, you can hire me - but you don’t have to
  2. This scan is stage one. The deeper problems still need me to look at your editor manually. That part technically can be automated but I prefer to not automate that.
    It doesn’t check for stuff like tech debt, scaling challenges, cost barriers, etc that I check in my full audit report I offer (called the Go-Live Plan)

So go crazy and run this on your apps. If it misses something obvious, or you want it to give you something more in the report, reply here and I can look into it. That is the actual reason I am posting it.

Cheers,
Ranjit