ScanYourSite

Your v0 app is live on Vercel. Check what it ships.

v0 gets a polished Next.js app online in minutes. What it doesn’t decide for you: which variables reach the browser, which headers protect the page and what search engines see. One URL, one list.

Free, no sign-up. The basic check makes only the requests an ordinary browser would.

See a full example report

What we check on a v0 site

Fixes in a form v0 can apply

Copy the prompt from the report into v0 or your editor: each item says where the problem is and how to confirm it’s gone.

Fix these issues on my-app.vercel.app.

1. The cookie "session" has no HttpOnly flag.
   Set httpOnly, secure and sameSite: "lax" where it is created.

2. No Content-Security-Policy header.
   Add one in next.config headers().

When done, re-check: https://scanyoursite.app/en?check=my-app.vercel.app

Preview was fine. Production changed.

With Pro we notice every production deploy, check it within minutes and write only when something new breaks.

See plans

Questions

Does it work on vercel.app subdomains?

Yes. Advanced checks that require domain verification need a domain you control.

Will it trigger Vercel’s bot protection?

The check identifies itself as ScanYourSiteBot and makes the same requests as a browser. If your firewall blocks it, the report says so instead of guessing.

Can I check preview deployments?

If the preview URL is public, yes — paste it like any other address.

For vibe coders

Paste your URL. Get the list in about a minute.

Every finding comes with what it means for you and how to fix it — or a prompt your AI coding tool can apply.

Free, no sign-up. The basic check makes only the requests an ordinary browser would.