Skip to main content

This is a canned example. Nothing on the public internet was requested. Sign up.

https://demo.invince.dev

[ FIX FIRST ]

[ FIX FIRST ]

A public page included a secret-shaped Stripe key and is missing basic browser protections. This is a sample, not a live scan.

Blockers (1)

  • A Stripe live secret key format was visible in public JavaScript (sample).

Warnings (1)

  • The demo response has no Content-Security-Policy header.

Unchecked (5)

  • [ UNCHECKED ]Open database
  • [ UNCHECKED ]Public uploads
  • [ UNCHECKED ]Private files
  • [ UNCHECKED ]GitHub repositoryConnect GitHub
  • [ UNCHECKED ]Private API endpoints (requires SDK)Install SDK

Watch this URL

We use only the cookies necessary to keep you signed in. No analytics or advertising cookies are set. Cookie list