ThreatScope
ThreatScope — Live Web Security Scanner. Detect vulnerabilities in HTTP headers, cookies, CORS, and SSL/TLS with instant actionable reports.
Estimated origin: India
Added July 8, 2026
· Last analysed July 8, 2026 · via 
· 50% unique tagline
StackScope is a free public catalogue of indie launches. We find launches on Product Hunt, Hacker News and similar feeds, then crawl each site to detect its tech stack and score it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 8 July 2026; the live site may have changed since.
ThreatScope is largely in shape, with complete legal pages and a complete set of security headers. Visible gaps: no robots.txt or sitemap and incomplete email security.
Launched on Product Hunt on July 8, 2026. The site is hosted on Render and served through Cloudflare, with a domain registered 3 weeks before launch. The crawl picked up 7 technologies on this site, covering auth, CDN, web fonts, and hosting. The stack includes Google Sign-In, Cloudflare, and Dodo Payments.
For context, it's on one of the most common stacks we track, shared by 419 launches and more locked down than the typical Product Hunt launch.
If you own this site, refresh the snapshot and see the full fix list any time →
Tech Stack (7)
| CDN |
Cloudflare
|
| Hosting |
Render
|
| Protocol | HTTP/3 |
| Security | HSTS |
| Auth |
Google Sign-In
(2)
|
| Font |
Google Fonts
|
| Payments |
Dodo Payments
|
Infrastructure
Email Security
Storage (0)
Readiness Breakdown How?
Performance How?
⚠ 2 images: 2 oversized, 2 without width/height
Indicative grade from a single automated render, not a substitute for Lighthouse or field data, and not part of the StackScope score.
Vibe Score Breakdown How?
| Signal | Points |
|---|---|
| Placeholder branding | +10 |
| AI copy signals | +5 |
| AI palette signals | +5 |
| AI writing signals | +5 |
| AI iconography signals | +3 |
| AI code-structure signals | +5 |
| AI typography signals | +15 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.