SniffPup
Scan AI apps for leaked keys
About
This app passively scans your websites for common security vulnerabilities, providing clear reports and actionable fixes. It checks for exposed API keys, database access gaps, leaked files, and improper security configurations, offering a quick first line of defense for your online presence.
What's New in SniffPup
2.3
November 11, 2026
See whether a site is safe to launch, right under the score. After you apply a fix, re-check that one issue and see a before-and-after plus the Fixed on date. Explain any finding to the AI you build with, or mark one as intentional. When you're signed in, scan pages that need a test account you control, and open a draft fix pull request from a finding on a GitHub repo you connected. Share a pre-launch checklist that opens in the app. Check up to 10 client sites in one go (saved to your account when you're signed in), email yourself the report with a 7-day reminder, and review your own code with an on-device prompt. Supabase history lets you compare earlier checks, download the results, and share a link. New alert switches: quiet watch, per-site email and phone, and a phone switch for each alert type.
MoreSubscriptions & In-App Purchases
Ultimate
Hourly re-checks of 30 apps, branded + monthly reports.
Developer apps
FAQ
What types of security issues does SniffPup check for?
SniffPup checks for exposed API keys and secrets in public JavaScript, Supabase tables readable without login, leaked files like .env and backups, and security headers, HTTPS certificate, and cookie settings. It provides a score from 0-100 with each issue explained and ranked by severity.
How does SniffPup perform its scans?
SniffPup performs a passive, read-only scan of a public URL, only examining what a visitor's browser can see. It does not log in, submit forms, attack, or load-test your site. You must confirm ownership of the site before each scan.
What are the subscription options for SniffPup?
SniffPup offers a free tier with daily scan limits. Paid options include a one-time unlock for full fix reports on one site, and monthly or yearly subscriptions (Solo, Starter, Pro) for automatic re-scans, email alerts, and more scans.
Can SniffPup find all security vulnerabilities?
No, SniffPup cannot check private code, database contents, admin areas behind logins, or server settings. A good score is not a guarantee of complete security, but it is a fast first check for common mistakes.
How often is SniffPup updated?
The latest version is 2.1, and it was last updated on 2026-11-06. The app is generally updated frequently to address new security threats and improve features.
What devices is SniffPup available on?
SniffPup is available on iPhone and iPad devices. It is designed for mobile use, allowing you to scan your websites on the go.
How do I cancel my SniffPup subscription?
Subscriptions renew automatically unless cancelled at least 24 hours before the period ends. You can manage or cancel your subscription directly within your Apple ID settings.
Does SniffPup have ads?
No, SniffPup does not contain advertisements. The app is free to use with certain limitations, and offers in-app purchases for additional features and unlimited scans.