XploitScan
Find and fix security vulnerabilities in AI-generated code. 158 rules. Built for Cursor, Lovable, Bolt, and Replit users. Free to start.
Estimated origin: United States
Added April 13, 2026
· Last analysed April 13, 2026 · via 
· 0% unique tagline (similar to Critik)
StackScope is a free public catalogue of indie launches. We find launches on Product Hunt, Hacker News and similar feeds, then crawl each site to detect its tech stack and score it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 13 April 2026; the live site may have changed since.
XploitScan ships with the launch fundamentals in place, with complete legal pages, a complete set of security headers, and a thorough launch checklist.
Launched on Product Hunt on April 2, 2026. The site is hosted on Vercel and served through Cloudflare, with a domain registered 1 week before launch. Our crawler found 16 technologies on this site, covering security, auth, captcha, and CDN. The stack includes Clerk, Next.js, and React.
It's also running the same core stack as 10,671 other launches and tighter on security headers than most Product Hunt launches.
If you own this site, refresh the snapshot and see the full fix list any time →
Tech Stack (16) · Indie stack
| CDN |
Cloudflare
|
| DNS |
Wix DNS
|
| Hosting |
Vercel
(3)
|
| Security |
Cloudflare Bot Management
|
| HSTS (2) |
| Business email |
Google Workspace
(2)
|
| Transactional email |
SendGrid
|
| Auth |
Clerk
(5)
|
| Captcha |
Cloudflare Turnstile
|
| CSS framework |
Tailwind CSS
|
| Framework |
React
|
| Meta-framework |
Next.js
(2)
|
| SEO |
Google Search Console
(2)
|
| Payments |
Stripe
|
| Error tracking |
Sentry
|
| Directory |
Product Hunt
|
Infrastructure
Email Security
Readiness Breakdown How?
Vibe Score Breakdown How?
| Signal | Points |
|---|---|
| AI copy signals | +5 |
| AI palette signals | +5 |
| AI writing signals | +5 |
| AI stack signals | +10 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.