Developer Security Tool

Your whole stack.
One security score.

Scan your machine, network, Supabase, and GitHub for exposed keys, misconfigured RLS, and committed secrets. Fix what matters before it costs you.

🔒 Runs 100% locally
💻 Linux · Windows · Mac
No account required
🔑 Your keys never leave
Security Score
95
A
Machine
82
B
Network
60
C
Supabase
30
F
GitHub
Everything in your stack,
audited.

Most security tools cover one layer. Plictor Secure covers all four — and shows you a single actionable score.

💻

Machine

Your local filesystem, keys, and configs. The stuff that lives on your laptop.

World-readable .env files
Hardcoded API keys in source code
SSH key permissions
.npmrc token exposure
Git plaintext credential storage
🌐

Network

Every device on your LAN, open ports, and services you forgot were running.

Full /24 subnet device discovery
Open port detection
MAC vendor identification
Unknown device alerts
SSH quick-connect bar
🗄️

Supabase

The database issues developers overlook until there's a breach.

Tables with RLS disabled
Sensitive tables exposed
Service key usage audit
Anon key scope check
Connection verification
🐙

GitHub

What's already committed. The breach that happened before you found this tool.

Secrets in recent commits
.env files committed to repos
Public repos with sensitive names
OpenAI, Stripe, AWS key patterns
Scans all your repos automatically
A score you can
actually act on

Every scan returns a 0–100 score with a letter grade. Each issue comes with a plain-English explanation and the exact command to fix it. No jargon, no vague warnings.

95
A
Machine
82
B
Network
60
C
Supabase
30
F
GitHub
Simple pricing

No usage limits. No upsells. One tool that covers your whole stack.

Monthly
$20
per month, cancel anytime
Machine, Network, Supabase, GitHub scans
Score ring + fix suggestions
Light and dark mode
Linux, Windows, Mac
All future updates
Subscribe — $20/mo
FAQ
Does it send my data anywhere?
No. Everything runs locally on your machine. Supabase and GitHub scans go directly from your machine to those services using credentials you provide. Nothing passes through Plictor servers.
What operating systems does it support?
Linux (AppImage + .deb), Windows (.exe), and Mac (.dmg). Download links are sent by email after purchase.
Is this different from Plictor Work?
Yes. Plictor Work is an AI agent desktop app. Plictor Secure is a dedicated security scanner. Work includes a basic local security scan in its Pro tier — Secure goes much deeper and adds Network, Supabase, and GitHub scanning.
What Supabase permissions does it need?
Your Supabase service role key. It's stored locally in ~/Documents/PlictorSecure/ and only used to audit your own project. Never shared.
What GitHub permissions does the token need?
A personal access token with repo scope (to read private repos). The token is stored locally and never leaves your machine except to call the GitHub API directly.