About

LeakWatch exists because a deployed Lovable, Bolt, Cursor, Replit, or Supabase app is an ordinary website. The page a stranger already receives can contain a live secret, or a public key that can read a table. The scan sends the same kind of GET request that stranger can send, then writes down what came back.

It does not log in, submit forms, or write to a database. A finding is a request and a response, not a warning without proof.

Contact: support@getleakwatch.online