SurfaceScan
Continuous EASM and CSPM mapped to DPDPA, GDPR & HIPAA. Discover shadow AI, validate secrets, and generate audit-ready evidence.
Estimated origin: India
Added September 2, 2026
· Last analysed September 2, 2026 · via 
StackScope records what new websites are built with, the week they launch. Most we find ourselves, by watching public internet infrastructure for brand-new sites; the rest come from Product Hunt, Hacker News and PeerPush. We crawled this one for its tech stack and scored it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 2 September 2026; the live site may have changed since.
Every technology below links to its own page: which other new sites launched with it. Vendors and agencies watch those pages with Stackdar and hear about new adopters the week they ship, from £15 a month.
SurfaceScan ships with the launch fundamentals in place, with a complete set of security headers, a thorough launch checklist, and clean crawl signals. Worth fixing first: incomplete legal pages and incomplete email security.
Launched on Product Hunt on September 2, 2026. The site is hosted on Upstash and served through Cloudflare, with a domain registered 4 months before launch. We've detected 18 technologies on this site, covering auth, transactional email, ai api, and captcha. The stack includes Auth.js, Clerk, and Next.js.
It's on a stack we've seen on only 8 launches and tighter on security headers than most Product Hunt launches.
If you own this site, refresh the snapshot and see the full fix list any time →
Tech Stack (18)
| CDN |
Cloudflare
|
| DNS |
Cloudflare DNS
|
| Hosting |
Upstash
|
| Security | HSTS |
| Server |
Caddy
|
| Auth |
Auth.js
(2)
|
Clerk
|
|
| Captcha |
Cloudflare Turnstile
|
| CSS framework |
Tailwind CSS
|
| Framework |
React
|
| Meta-framework |
Next.js
(4)
|
| UI library |
Lucide Icons
|
| AI API |
Google Gemini API
|
Infrastructure
Email Security
Storage (3)
| Name | Lifetime | Detected as |
|---|---|---|
| __Host-next-auth.csrf-token | session | - |
| __Secure-next-auth.callback-url | session | Auth.js |
| Key | Size | Detected as |
|---|---|---|
| nextauth.message | 74 B | Auth.js |
Readiness Breakdown How?
Performance How?
⚠ 3 images: 3 oversized, 3 without width/height
Indicative grade from a single automated render, not a substitute for Lighthouse or field data, and not part of the StackScope score.
Vibe Score Breakdown How?
| Signal | Points |
|---|---|
| AI palette signals | +5 |
| AI writing signals | +5 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.