SoftifyBase Security

SoftifyBase Vulnerability Scanner

"I'm in danger!"

$ Enter your SoftifyBase API URL to start penetration test

[?]

Where to find your SoftifyBase API URL:

Go to studio.softifybase.com
Select your project
Your API URL is shown in the dashboard

Format: https://api.yourdomain.com

+ Add anon key (optional, for deeper testing)

[?]

Where to find your anon key:

Go to studio.softifybase.com
Select your project
Click API Settings
Copy anon public key

Starts with: eyJhbGciOiJIUzI1...

This key is safe to use - it's public

[!] Only test projects you own or have explicit authorization to test

AI-assisted development can miss security holes. Test your SoftifyBase projects with 280+ attack vectors across 9 categories. Know your security posture.

9 Attack Categories. 280+ Attack Vectors.

Comprehensive coverage of every SoftifyBase attack surface. Each category contains multiple attack vectors tested against real vulnerabilities.

-- 01

No Security

RLS Disabled

!! 02

Bad RLS

USING (true)

$$ 03

Business Logic

Price & IDOR

<> 04

Vibecoder

AI Mistakes

;-- 05

Injection

SQL & XSS

{} 06

GraphQL/Vault

Secrets

@ 07

Auth/Tenant

Multi-tenant

[DB] 08

Database

Deep Access

~/ 09

AI/Realtime

ML & WS

>> 10

Backup/Logs

Operations

●

Active Breach Testing

Actually attempts to exploit your SoftifyBase instance with real attack vectors. No guessing - real proof of vulnerabilities.

↻

Ralph Wiggum Loop

"I'm in danger!" - Persistent iteration until every vulnerability is found. Keeps attacking until the attack surface is fully mapped.

✓

Fix Verification

After you apply fixes, re-runs all attacks to confirm they're actually resolved. No more "trust me, it's fixed."

[!] For Authorized Testing Only

Only test projects you own or have explicit permission to test. This scanner performs real attacks that could affect data. Use responsibly.