Qualmly
Every qualm, caught before prod.
Subscription1,230 impressions#7 of its week
Qualmly scans a live app URL in 30 seconds to surface security, compliance, and accessibility issues.
- for
- Developers shipping AI-generated or vibe-coded web apps without senior-engineer review.
- pricing
- freemium
- license
- MIT
Key features
- Instant live URL scan — Scans a public bundle in ~30 seconds and reports findings.
- Comprehensive issue detection — Finds leaked keys, missing Supabase RLS, exposed admin routes, OWASP Top 10, WCAG 2.2, 12-Factor violations, etc.
- Plain-English results — Findings are presented in clear, non-technical language.
- Active Supabase RLS probe — Attempts read-only queries to confirm row-level security enforcement.
- Weekly auto-rescan & diff alerts — Pro tier rescans weekly, diffs results and emails new findings.
- BYOK Anthropic key encryption — Your Claude key is AES-GCM encrypted in the browser before any transmission.
- Open-source single HTML file — Runs entirely in the browser; no signup required.
Use cases
- Check for leaked secret keys before production launch
- Validate Supabase RLS is correctly enforced
- Monitor a live app weekly for regressions
- Audit AI-generated code for OWASP and accessibility issues
- Ensure WCAG 2.2 compliance of public pages
Qualmly FAQ
Do I need to sign up to use Qualmly?+
No, the free tier works without any signup; scans run entirely in your browser.
Can I use my own Anthropic API key?+
Yes, you can bring your own Claude key, which is encrypted locally before any use.
Is the active Supabase probe safe?+
It performs read-only queries limited to 10 requests; you must have permission to test the target database.
What happens to my data after a scan?+
Qualmly does not store scan results; all processing happens locally in the browser.
How does the Pro tier pricing work?+
It costs $99 per year per app, includes weekly rescans, diff email notifications, and encrypted key storage.
Is Qualmly open source?+
Yes, the tool is released under the MIT license as a single HTML file.
Summarized by DevHunt from qualmly.dev · Oct 2, 2026. Details may change; check the official site.
