SniffPup is a security scanning tool for web applications built with AI-assisted development platforms such as Lovable, Bolt, Cursor, Replit, and v0. Its scanner, named Ember, performs passive, read-only scans of public websites to identify common security issues. The tool loads a target site the way a standard browser would, analyzing the HTML and JavaScript it receives to detect exposed API keys, secrets, and misconfigurations. It also checks a fixed list of well-known paths for publicly accessible files like `.env` and `.git/config`. The scanner evaluates several security aspects, including the presence of security headers, HTTP to HTTPS redirects, and the visibility of the site to AI crawlers like GPTBot. Each identified issue is assigned a severity level and accompanied by a plain English explanation. For remediation, SniffPup generates fix prompts tailored for specific AI builders, allowing users to directly instruct their development environment to resolve the problem. The tool offers a free scan that provides a full report and a fix for the most critical issue. A one-time payment unlocks fixes for all issues and 30 days of re-scans, while a subscription provides ongoing monitoring. SniffPup operates strictly as a passive scanner. It does not log in to services, send attack payloads, or utilize any discovered secrets. This limits its scope to what is publicly accessible. It cannot scan native iOS or Android applications, content behind login pages, or private source code repositories. The free scan does not evaluate database rules, such as Supabase Row Level Security policies. SniffPup is not affiliated with the AI builder companies it supports. Privacy is addressed by masking secrets in stored findings and limiting Pro database checks to anonymous visibility.