secret
Stripe secret key exposed in client bundle
STRIPE_SECRET_KEY is readable in main.js. Anyone can extract it from the browser and charge or refund on your account.
Scanned: example-app.com
This is an illustrative example, not a real scan result.
Scan report
3 security findings
Security scan3
Checks your live site for exposed credentials and third-party data collection.
tracker
Third-party analytics loaded before consent
A marketing analytics script fires on first paint, before any cookie consent is collected.
tracker
No trackers on the marketing page
The landing page loads no third-party analytics or ad scripts — consistent with your stated policy.
Want Clarobit to watch this site for you?
Paid plans re-scan automatically and alert you the moment something changes.