Paste something you shipped with Lovable, Bolt, v0 or Supabase and BreachProbe reads the JavaScript you already serve the public, scoring exposed API keys, openly readable REST tables, broken-auth patterns and missing security headers. The full report then signs up two throwaway users and asks, table by table, whether one can read the other's rows.