Check an app
Check fetches the public page: HTTPS, response, and public HTML. It cannot see other people’s logins or in-app exceptions.
Rules
- You must own the app or have permission. Tick the box on the form.
- Use a URL you can open in a browser.
- Report an unauthorized check at Report abuse.
Where to run it
- Check
- Overview in a workspace (paste box)
- Sidebar: Check app
What you get
A verdict, a short reason, and an action plan of Fix first / Do not launch line items with how to fix. You must be signed in. If the public HTML looks like an empty app shell, that is a warning from static HTML, not a Playwright wait after hydration. Stack hints (Next.js, Stripe.js, and similar) come from tags visitors already get, not a generated topology of your cloud.
This browser can remember recent Check ids in localStorage so you can reopen them. Signing in does not upload that list. Each check id can also show a README badge image. Copy share link gives an unlisted /share/{id} URL for Slack. That page hides owner-only checks. Search engines are told not to index it.
A Cloudflare or WAF challenge is Not checked, not Down. Invince does not bypass captchas. Cloud Run egress is not a static IP allowlist.
After you sign in, same-origin links, form actions, and extra paths you list are GETted (capped). A 404/5xx is a warning. Invince does not log in as you or drive a headless browser on the homepage.
Checking the same public link again within 24 hours reuses the last result and does not use a check. Recheck on a finding is also free. Public checks never spend shared AI requests.