Security Scanner for React Native
Catch vulnerabilities before production.
One command. Zero setup.
Static Security Analysis
Get detailed insights into your app's security posture and vulnerabilities.
Security Analysis
✓ Scan completed in 3.1s • 959 files analyzed
Run your first scan
No Setup. No Configuration. Instant Results.
Built for developers
Tool that understands React Native, Expo, WebViews, mobile storage, and platform-specific risks and vulnerabilities.
68+ Security Rules
Comprehensive detection of insecure storage, cleartext traffic, hardcoded secrets, and more.
Zero Configuration
Works out of the box with React Native and Expo. No setup files or configuration needed.
100% Private
All scanning happens locally on your machine. Your code never leaves your system.
Lightweight & Fast
Minimal dependencies and optimized performance. Scan your entire project in seconds.
CI/CD Ready
Seamless integration with GitHub Actions, GitLab CI, and other CI/CD platforms.
JSON & HTML Reports
Export detailed reports in HTML, JSON, or CLI format for easy sharing and integration.
What it catches
From hardcoded secrets to platform misconfigurations
Hardcoded API Keys & Secrets
Detects exposed API keys, JWT tokens, AWS credentials, and other secrets in source code that can be extracted from app bundles.
Insecure Data Storage
Identifies sensitive data stored in AsyncStorage without encryption. AsyncStorage is plaintext and accessible with root access.
Android Cleartext Traffic
Detects when usesCleartextTraffic is enabled in AndroidManifest.xml, allowing unencrypted HTTP connections.
WebView Security Issues
Finds dangerous WebView configurations like JavaScript injection, file access enabled, and missing URL validation.
iOS App Transport Security
Catches disabled ATS or overly permissive exceptions that allow insecure HTTP connections on iOS.
Weak Authentication Patterns
Detects insecure random generators for tokens, missing JWT expiry checks, and insecure password input fields.
Start securing your app today
Join developers building safer React Native applications with open-source tools