ScanMySaaS
Overview
ScanMySaaS helps SaaS founders review website and GitHub repository security. The website scanner checks public headers, cookies, TLS, CORS, and exposed files across up to 25 pages (60+ checks, 40+ sensitive paths probed) and returns a severity-ranked report with affected URLs. The GitHub repository scanner flags committed secrets, dependency advisories, risky GitHub Actions configurations, and Supabase row-level-security gaps via a read-only GitHub App; public repositories are scanned for free, and private repositories are included on paid plans. Paid plans add AI review of selected high-risk server files, with code evidence, and offer coding-agent fix prompts. The product explicitly states that automated findings require human verification and do not replace penetration testing.
Key Features
- Free website vulnerability scan covering 60+ checks across up to 25 pages
- Severity-ranked report with affected URLs and prioritized remediation order
- Read-only GitHub App repository scanner for secrets, risky Actions, and Supabase RLS gaps
- Public repository scanning is free; private repos included on paid plans
- Coding-agent fix prompts for findings, for use with tools like Cursor or Claude
Best For
Indie SaaS founders and small teams who ship with AI coding tools and want a quick, automated check for common website and repository security misconfigurations before or after launch.
Pros & Cons
Cons
- The product itself states that automated findings require verification and do not replace human security review or professional penetration testing
- AI code review of high-risk files is only available on paid plans and is subject to token limits
Pulse Verdict
Editorial review by SEODataPulse · Editorial rating: 4/5 · Updated
This is an editorial assessment, not an average of customer ratings.
“A working automated security scanner for SaaS founders that checks a deployed website for common misconfigurations and a connected GitHub repository for committed secrets and risky settings, with clear caveats that it supplements rather than replaces human security review.”
Pricing
Freemium: free website scan and public repo scanning, Starter $29/month, Pro $79/month (AI review included on paid plans, subject to token limits).
Pricing changes often — confirm current plans on the official site.