Security Scanner for Cursor Apps

We scanned 0 Cursor apps. N/A had critical vulnerabilities. Is yours secure?

0apps scanned 0with CRITs N/ACRIT rate

Top issue: AI-generated code with missing auth middleware

What we check on Cursor apps

Supabase RLS — extracts real table names from your JS bundle, tests each with the anon key
API keys in bundles — OpenAI, Anthropic, Stripe, Google, AWS keys shipped client-side
Authentication — IDOR, OAuth misconfig, session entropy, JWT weak secrets, auth bypass on API endpoints
Mass assignment — signup privilege escalation (role=admin), PATCH/PUT field injection
Payment security — Stripe/Paddle webhook signature bypass, unsigned event acceptance
Injection — SQL injection (boolean + error-based), server-side template injection, XSS
Infrastructure — exposed /.env, /.git, admin panels, internal API endpoints, subdomain takeover
AI code quality — hallucinated functions, unsafe eval(), hardcoded credentials
80+ total modules — nuclei CVE templates, CORS, CSP bypass, PII exposure, and more

Paste your Cursor app URL on our homepage for a quick 10-second scan. For the full 80-module audit, sign up — one free scan, no card.