Bleek.dev
Free security scanner for apps built with Lovable, Bolt, Cursor, v0 and Replit. Find exposed keys, broken Supabase RLS, auth bypasses and missing headers in 60 seconds — with copy-paste fixes.
Added July 11, 2026
· Last analysed July 11, 2026 · via 
· 57% unique tagline
StackScope is a free public catalogue of indie launches. We find launches on Product Hunt, Hacker News and similar feeds, then crawl each site to detect its tech stack and score it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 11 July 2026; the live site may have changed since.
Bleek.dev ships with the launch fundamentals in place, with complete legal pages, a complete set of security headers, and a thorough launch checklist. Worth fixing first: tracking cookies set before any opt-in and incomplete email security.
Launched on Product Hunt on July 10, 2026. The site is hosted on Vercel, with a domain registered 7 weeks before launch. Our crawler found 15 technologies on this site, covering security, AI builders, analytics, and CMS. The stack includes Next.js, React, and Sanity.
It's also one of 47 launches on this exact stack and tighter on security headers than most Product Hunt launches.
If you own this site, refresh the snapshot and see the full fix list any time →
Tech Stack (15)
| DNS |
Namecheap DNS
|
| Hosting |
Vercel
(2)
|
| Security |
Have I Been Pwned
|
| HSTS | |
XposedOrNot
|
| Email forwarding |
Namecheap Email Forwarding
(2)
|
| CMS |
Sanity
|
| CSS framework |
Tailwind CSS
|
| Framework |
React
|
| Meta-framework |
Next.js
(5)
|
| UI library |
Lucide Icons
|
| Analytics |
PostHog
(6)
|
| SEO |
Google Search Console
|
| Payments |
Lemon Squeezy
(4)
|
| AI builder |
Lovable
|
Infrastructure
Email Security
Storage (5)
| Name | Lifetime | Detected as |
|---|---|---|
| ph_phc_CjHME65L7oTBPkCBiHb5EGSvXKsB4o4kzFHrsiiYKDZw_posthog | 1y | PostHog |
| Key | Size | Detected as |
|---|---|---|
| ph_phc_CjHME65L7oTBPkCBiHb5EGSvXKsB4o4kzFHrsiiYKDZw_posthog | 1.4 KB | PostHog |
| Key | Size | Detected as |
|---|---|---|
| ph_phc_CjHME65L7oTBPkCBiHb5EGSvXKsB4o4kzFHrsiiYKDZw_posthog | 388 B | PostHog |
| ph_phc_CjHME65L7oTBPkCBiHb5EGSvXKsB4o4kzFHrsiiYKDZw_primary_window_exists | 4 B | PostHog |
| ph_phc_CjHME65L7oTBPkCBiHb5EGSvXKsB4o4kzFHrsiiYKDZw_window_id | 38 B | PostHog |
Readiness Breakdown How?
Performance How?
Broken first-party requests (1), worth fixing
- 404 /llms.txt?_rsc=5CB68i4pnAekjehf
Indicative grade from a single automated render, not a substitute for Lighthouse or field data, and not part of the StackScope score.
Vibe Score Breakdown How?
| Signal | Points |
|---|---|
| AI onboarding signals | +5 |
| AI writing signals | +5 |
| AI stack signals | +10 |
| Recognised AI builder signature | +100 |
| Default scaffold favicon | +10 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.