Hackmacky is a security scanner built for indie hackers and small teams shipping on Vercel with Supabase or Neon. Paste your app鈥檚 URL and you get an instant preview score. Sign up, verify domain ownership by DNS TXT record or a /.well-known/security-scan.txt file, and unlock the full report. The full scan checks the things that leak data in vibe-coded apps: public storage buckets, exposed RPC functions, writable tables, and weak auth posture.
