Security Audit Bot

by Phillip

Reviews code you own and returns a private, verified security report that opens with up to five plain-English fixes, with checks for the mistakes AI-built apps make (browser-bundled keys, Supabase RLS, open Firebase rules, unauthenticated API and AI routes) plus PHP rules. Includes a repo-only key rotation checklist for Railway's October 2026 incident.