> preflyt

Check your deployment before you ship it

Detect exposed secrets, open ports, and unsafe defaults in seconds.

Free. No signup needed. Takes ~30 seconds.

Add Preflyt to every deploy

One command. Runs after every deploy. Catches what you missed.

npx preflyt-check https://your-site.com

Add --fail to block deploys when issues are found.

AI agents can run this too

Claude Code, Cursor, Copilot, OpenClaw, Cline, and any agent that supports AgentSkills - drop the skill file and your agent scans after every deploy.

See integration guide →

What we check

Exposed files

  • .env and config files
  • .git repositories
  • Backup and database dumps
  • Source maps and dependency files

Server and network

  • Database ports (MySQL, Postgres, Redis, MongoDB)
  • Dev servers and admin panels
  • Debug endpoints
  • Docker and Consul APIs

HTTP hardening

  • Missing security headers (CSP, HSTS)
  • CORS misconfiguration
  • Insecure cookie flags
  • Server version leakage
See all checks →

Not a pentest tool. Not a vulnerability scanner. Just the obvious deployment mistakes that break real apps.

100+ deployments scanned·~20 second scans·Read-only checks·No signup required

Pre-deployment safety checks for your web app, API, or backend