Blog

Anatomy of a leak

Real data exposures we find in AI-built apps, taken apart with the app anonymized, so the pattern is clear and the next person avoids it. Every one is a mistake that took a single setting to make and about a minute to fix.

Anatomy of a leak · September 2026The app that promised bank-level security, then served its whole user table to anyoneA real app we scanned promised bank-level security while its user table, for thousands of real people, was readable by anyone with a browser. Here is exactly how that happens, and the sixty-second fix.

Check your own app for this, free.

A free scan runs in minutes, no signup. Where it finds an open database, it proves it with the exact request, not just a maybe.

Run a free scan