Lair reads your app's code and tells you what to fix, in plain words.
Design
Make it look like yours, not like every other AI app.
Stock fonts and colors, text piled under text, the starter-template look.
Learn more ›Security
Keys, access and the things that get an app broken into.
Secret keys in the page, passwords stored in the open, typed text run as code.
Learn more ›Performance
How fast it loads and runs, on a phone and a laptop.
Pictures far bigger than their box, scripts that hold up the page, slow fonts.
Learn more ›Mobile
How it works on a phone.
Buttons too small to tap, text too small to read, the sideways scroll.
Learn more ›Quick
A first look. The things most likely to bite, found fast.
5 to 20 credits, by app size
Polished
A fuller pass before you share the link.
10 to 30 credits, by app size
Deep
Everything we look at.
15 to 50 credits, by app size
Each problem the scan finds comes back as one block: what the code does, the exact line, what goes wrong there, and a fix.
When the fix is one paste, the prompt is written for you. Copy it into the AI tool that built the app.
When it is bigger than a paste, you get numbered steps, with the safe thing to do today first.
budget-buddy.html, line 89. Also line 243.
const OPENAI_KEY = 'sk-proj-JrZS…';
Line 89 stores a secret OpenAI key in OPENAI_KEY, and aiTip on line 195 sends it from the visitor's browser to OpenAI. Anyone who opens the page can read the key and spend on your account.
Paste this into your AI tool
Remove the OpenAI key from budget-buddy.html. Make aiTip call a small server function that holds the key instead, and have the page call that function. Also remove the premium password on line 243 and…
Anyone who opens the page can see the key, use it, and run up a bill on your account.