Free security scan

Paste the public URL of an app you own. ShipWatch reads the page and its same-origin scripts, flags live secret keys, and, if it finds a Supabase URL plus an anon key, checks whether tables come back with rows.