Safety Grade · Anchor Data Labs
How exposed is
your site?
This grades what your site already serves publicly: secrets exposed in the page, missing security headers, transport and CORS issues, the kind of thing a site built fast (including with AI tools like Lovable or Bolt) can ship by accident. We make ordinary unauthenticated requests, including checks for commonly-exposed files like .env, and never log in, exploit, or change anything. Secrets are looked for in the page's HTML and inline scripts; separate JavaScript files aren't read. An A–F grade, usually in under a minute, free. It's an automated public-surface check, not a penetration test or certification.
Grading your site…
Reading your public headers, transport, and exposed files.
Keep this tab open; your grade usually appears here in under a minute.
- Non-invasive by design. Ordinary unauthenticated requests for what your site serves, plus checks for commonly-exposed files. No login, no exploitation, nothing changed.
- Redacted, always. If we spot an exposed secret, we keep its type, length and position, a one-way fingerprint and a masked preview (at most the first and last 4 characters). Never the full value.
- Independent. We don't sell security fixes. That's what keeps the grade honest.