Question 1

What is Defexity?

Accepted Answer

Defexity is a production-readiness scanner and reliability monitor for apps built with AI coding tools. It scores your live site across security, reliability, privacy, accessibility, SEO and performance, monitors critical flows like signup and checkout, and writes a fix prompt for your AI tool when something breaks.

Question 2

Who is it for?

Accepted Answer

Indie hackers, freelancers, agencies and small teams who ship quickly with AI coding tools and want confidence that real users can sign up, log in and pay, without hiring a QA or security team first.

Question 3

Does it work with Cursor, Lovable, Bolt, and Replit?

Accepted Answer

Yes. Scans work on any public URL or uploaded project, whatever built it. Fix prompts are written for Cursor, Claude Code, Lovable, Bolt and Replit, so you can paste them straight into the tool you already use.

Question 4

Is my source code safe?

Accepted Answer

A URL scan never sees your source code: it only makes read-only requests to your public site, the same way a browser does. If you upload a .zip, Defexity reads it in memory, never runs it and never keeps the files; only the findings are saved, with secret values redacted. Your scans are private to your account.

Question 5

Does it support Stripe and Supabase?

Accepted Answer

Yes. The scanner detects exposed Stripe secret keys and Supabase service-role keys today. Monitoring plans add a checkout check that opens your Stripe or Paddle checkout without paying, and API checks that can confirm a health endpoint reports your database as up.

Question 6

Can it monitor AI features?

Accepted Answer

Yes. The scanner flags AI provider keys in the browser and AI endpoints without auth or rate limits. Monitoring tracks AI endpoint latency, failed answers and cost, so a broken or runaway AI feature does not go unnoticed.

Question 7

Does it replace security testing?

Accepted Answer

No. Defexity catches common, high-impact problems in AI-built apps quickly and continuously, but it is not a penetration test, a code audit or legal advice. For apps handling sensitive data or payments at scale, use it alongside a professional security review.

Question 8

Can I cancel anytime?

Accepted Answer

Yes. Paid plans are month to month (or yearly with two months free) and can be cancelled from your billing page. Your first payment can be refunded in full within 14 days (see the refund policy). The free plan stays free with no credit card.

Question 9

Why do I need an account to scan?

Accepted Answer

Scan results can contain sensitive details about your app, so every report is private to the account that ran it. An account also lets Defexity rate-limit scans fairly and keep your history, score trend and fix prompts in one place.

Question 10

Can I export or delete my data?

Accepted Answer

Yes. In Dashboard → Settings you can download everything Defexity holds about you as JSON, or delete your account. Deletion removes your profile, scans, findings and API keys; security audit entries are kept only as long as the law requires.

Question 11

Do you offer two-factor authentication?

Accepted Answer

Yes. You can turn on authenticator-app (TOTP) codes in Dashboard → Security, and review your active sessions, API keys and security log there.

Questions, answered

GeneralWhat is Defexity?

GeneralWho is it for?

ScanningDoes it work with Cursor, Lovable, Bolt, and Replit?

Security and privacyIs my source code safe?

ScanningDoes it support Stripe and Supabase?

ScanningCan it monitor AI features?

Security and privacyDoes it replace security testing?

BillingCan I cancel anytime?

GeneralWhy do I need an account to scan?

Security and privacyCan I export or delete my data?

Security and privacyDo you offer two-factor authentication?