decloak

Changes to the facts recorded here, not a live scan of every vendor update. Save this tool to follow updates in your account.

1. 9/13/2026

   Updated: best for, features, limitations, platforms, summary, use cases, walkthrough

   See recorded changes

   bestFor

   Before: ["Vibe coders, small businesses, compliance teams, agencies, solo builders, security teams, and MSPs who want automated web security intelligence."]

   After: ["Vibe coders, small businesses, compliance teams, agencies, solo builders, security teams, and MSPs who want automated web security intelligence.","Solo builders and vibe coders who ship fast AI-built apps and want to ensure security keeps up."]

   features

   Before: ["Single-page instant scan providing a complete security snapshot across 8 layers in under 15 seconds without account or setup.","8-layer security analysis including HTTP/TLS, HTML, network traffic, JavaScript CVEs, tag managers, third-party supply chain, platform misconfigurations, server/CMS software CVE checks, and AI synthesis.","Detection of common security failures in AI app builder platforms such as publicly readable databases and exposed service_role keys.","JavaScript CVE detection using Retire.js and OSV database checks pinpointing exact files and versions with linked CVE IDs.","Full checklist scanning of HTTP security headers including CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, cookie flags, CORS, and server version disclosure."]

   After: ["Free single-page security scan providing a scored security report in 15 seconds without requiring an account.","AI agent that investigates every finding across the whole site for deeper analysis.","Authenticated penetration testing behind login credentials.","Audit-ready evidence mapped to compliance standards such as SOC 2, ISO 27001, NIS2, DORA, LGPD, and PCI DSS.","Detection of publicly readable Supabase databases via anon keys, exposed service_role keys, and known platform CVEs common in AI app builders."]

   limitations

   Before: []

   After: ["Free tier provides only a single-page scan; full-site AI agent scans require upgrading to paid tiers.","Some advanced features like DNS & SSL/TLS security analysis, subdomain takeover detection, and scheduled scans require paid plans."]

   platforms

   Before: ["Web-based platform accessible via URL submission and online dashboard."]

   After: []

   summary

   Before: "Decloak is a web security intelligence platform that provides a free 15-second security scan of websites, followed by deeper AI agent investigations, authenticated penetration testing, and compliance-ready evidence for standards like SOC 2 and ISO 27001. It analyzes multiple layers of a website's stack, including JavaScript CVEs, hidden trackers, and platform misconfigurations, to identify security risks often missed by single-purpose scanners."

   After: "Decloak is a web security intelligence platform that provides a free 15-second security scan of websites, followed by deeper AI agent investigations, authenticated penetration testing, and compliance-ready evidence for standards like SOC 2 and ISO 27001. It analyzes multiple layers of a website's stack, including JavaScript CVEs, hidden trackers, and platform misconfigurations, to surface risks that single-purpose scanners might miss."

   useCases

   Before: ["Detecting exposed API keys, missing security headers, vulnerable libraries, and common misconfigurations in AI app builder platforms like Supabase, Lovable, and Base44.","Providing audit-ready evidence mapped to compliance standards such as SOC 2, ISO 27001, NIS2, DORA, LGPD, and PCI DSS."]

   After: ["Security scanning and vulnerability detection for AI-built apps using platforms like Supabase, Lovable, Base44, and Bubble.","Compliance evidence generation for standards such as SOC 2, ISO 27001, NIS2, DORA, LGPD, and PCI DSS."]

   walkthrough

   Before: ["Start with a free 15-second scan that provides a security score and report, then use the AI agent for deeper investigation and authenticated penetration testing, and finally obtain audit-ready evidence for compliance.","Use the Priority Remediation Plan to get a ranked list of top fixes with AI-written guidance, exportable as a PDF to hand to clients or developers."]

   After: ["Start with a free 15-second scan by pasting a URL to get a security snapshot across 8 layers without an account.","Obtain audit-ready evidence mapped to compliance standards for SOC 2, ISO 27001, NIS2, DORA, LGPD, and PCI DSS to support compliance needs."]