JadeShield

Ship your AI-built app without the 3am breach.

Vibe coding is fast. The security holes it leaves — leaked keys, databases with no access rules, payment buttons that charge twice — are invisible until someone finds them. JadeShield catches them before and after you build.

Passive scan — we only look at what any browser can see. No login, no data touched. 5 free scans a day.

Three steps, inside the tool you already build in

1. Before you build

Ask for the security requirements for your stack — RLS policies, where secrets go, rate limits, webhook checks — and a test plan for the edge cases people skip.

2. After you deploy

Scan the live URL for leaked keys, exposed .env/.git, missing headers, insecure cookies and Supabase misconfig.

3. Fix in one paste

Every finding comes with a ready-to-paste instruction for Cursor, Claude Code or Lovable. Re-scan to confirm.

Connect it to your coding agent

JadeShield is an MCP server. Add it once and your agent can call it while it builds.

{
  "mcpServers": {
    "jadeshield": {
      "url": "https://shield.jadetab.com/mcp"
    }
  }
}

Tools: security_requirements, generate_tests, scan_url, fix_prompt.

Pricing

Free

5 URL scans a day. Top findings shown.

Launch report

$19

One-off. Full findings + fixes for one app you're about to ship.

Builder

$19/mo

The MCP in your agent. Unlimited scans + requirements + tests, 3 projects.

Guard

$49/mo

Daily monitoring, verified deep checks (RLS, IDOR), 15 projects, badge.

Paid plans open soon. Scan free now and connect the MCP.