SENTINEL

SENTINEL is a local security scanner that checks your code, live sites and databases for exposed secrets, open databases and known vulnerabilities before attackers find them. Core capabilities: • Detects exposed API keys for Stripe, AWS, OpenAI, Google and more • Flags Supabase and Firebase tables that anyone can read without signing in • Checks dependencies against the live OSV.dev vulnerability feed with exact fix versions • Scans git history for keys you already deleted • Exports a clear PDF report with severity ratings. Every check runs read-only on your machine, so your code never leaves your computer and only package names touch the network. Each finding comes with a concrete fix, such as rotating a leaked key, enabling Row Level Security or upgrading to a patched package version. MySQL, SQL Server and MongoDB are reviewed from their connection strings alone and are never connected to, so the analysis itself cannot expose your data. Built for founders, indie developers and small teams who shipped an app quickly with modern coding tools like Lovable, Cursor and v0 and need to catch mistakes before launch. Agencies and freelancers can also use it to audit client projects before handing them over. The first 30 scans are free.