ShipGuardScan a site

A

Security scorecard

studio.sharenow.today

Score 100/100 · 0 failed · 0 warnings · 10 passed · 1 not applicable

Scanned 2026-10-21 12:02 UTC in 10.4s · 10 requests · 2 scripts · Detected: Cloudflare

• Site returns HTTP 200 for unknown paths (SPA catch-all); artifact checks compared against that baseline.

Top finding (free)

criticalpassClient secrets

No server-side secrets found in client bundles

Checked 3 HTML/script sources for Stripe, OpenAI, Anthropic, Supabase service-role and Resend secrets. Publishable keys were ignored.

10 more checks

criticalpassExposed artifacts

Details, location & fix prompt locked

highpassExposed artifacts

Details, location & fix prompt locked

highpassTransport

Details, location & fix prompt locked

mediumpassSecurity headers

Details, location & fix prompt locked

mediumpassSecurity headers

Details, location & fix prompt locked

lowpassExposed artifacts

Details, location & fix prompt locked

lowpassSecurity headers

Details, location & fix prompt locked

lowpassSecurity headers

Details, location & fix prompt locked

lowpassSecurity headers

Details, location & fix prompt locked

highskippedSupabase / BaaS

Details, location & fix prompt locked

Heuristic match = a string in your public JavaScript/HTML looks like a secret (likely, not verified). Confirmed = directly observed in an HTTP response (e.g. a header is absent, a file's contents were validated). All checks are passive and read-only; secrets are stored redacted to their first 6 characters. A good grade is not a guarantee of security.