Example. A real free scan of OWASP NodeGoat, a public training app that is vulnerable on purpose. Your free scan shows the same view.
OWASP/NodeGoat
Anyone who can read the repo can impersonate your server or decrypt its traffic.
4 more findings hidden in the free scan. The full report lists every one with a fix prompt.
Every finding, with fix prompts: $19
Same repo and commit. The full report lists every finding, adds a fix prompt for each one, and runs an AI review on top of the scanners.
- Every finding with file and line
- A fix prompt for each one, ready for Cursor or Claude Code
- HTML and PDF report by email
- AI review on top of the scanners
Free scan uses scanners only, no AI. One finding is shown as a sample; the rest are counted but hidden. This is a first pass, not a security audit.
Leakcade is an automated check. It can miss vulnerabilities and is not a substitute for a professional security audit or pentest. Provided as is. You stay responsible for your code. Where the law allows, our liability is limited to what you paid. Terms