Appwrite Security Audit - Find Public Collections Free

Detect the infamous Firebase data-leak patterns: open match-all wildcards, 'if true' literals, auth-only-no-ownership, expired test-mode rules. Active probe confirms leaks live via anonymous Firestore REST.

Scan Supabase projects for RLS leaks, exposed SECURITY DEFINER functions, and grant misconfigurations. Generates HTML report with copy-paste fix SQL.

Scan Supabase projects for permissive role grants and open Hasura permissions with active anonymous GraphQL probe. Generates HTML report with copy-paste fix SQL.

Scan Supabase projects for over-permissive API rules with active anonymous probe to confirm leaks live. Generates HTML report with copy-paste fix SQL.

Website Security Auditor

zyrox/website-security-auditor

A powerful security tool to scan websites for exposed API keys and XSS vulnerabilities.

GitHub Repo Search — Stars, Language & Topics

ryanclinton/github-repo-search

Search and scrape GitHub repositories by keyword, language, stars, forks, or topic. Extract structured repo metadata including owner, license, topics, and activity timestamps. Sort by stars, forks, or recently updated. Export to JSON, CSV, or API. No token required.

Tech Stack Detector

automation-lab/tech-stack-detector

Affordable BuiltWith and Wappalyzer alternative. Detect 45+ technologies on any website — JavaScript frameworks, CMS, analytics, CDN, and hosting — from a single HTTP request. Ideal for bulk lead qualification, competitive analysis, and technology market research.

MX Record Checker

automation-lab/mx-record-checker

This actor checks MX records for domains to identify email hosting providers and mail server configuration. It queries MX records, sorts by priority, and detects providers (Google Workspace, Microsoft 365, ProtonMail, etc.). Useful for email deliverability auditing and provider identification.

DNS Lookup

automation-lab/dns-lookup

DNS Lookup resolves all standard DNS record types for one or more domains. It returns structured data including IP addresses, mail servers, name servers, TXT records, and an email security analysis that checks for SPF and DMARC configuration.

TXT Record Checker

automation-lab/txt-record-checker

This actor checks DNS TXT records for domains. It validates SPF (Sender Policy Framework), DMARC (Domain-based Message Authentication), and DKIM (DomainKeys Identified Mail) configuration. Also identifies domain verification records for Google, Facebook, Microsoft, and Apple.