Your app, in context.
Connect supported repositories and selected GitHub and Cloudflare services. Agree the scope for your app during pilot setup.
Suhail
Security checks with your app in view.
For small studios building on GitHub and Cloudflare. Bring supported checks, findings and coverage gaps together, with evidence to guide your next fix.
Illustrative workspace · example only
Know where you stand.
Version checked
See the source revision behind a result.
Coverage
Know which checks ran and what remains uncovered.
Follow-up
Review a fix with supporting evidence.
Built around the apps you ship
From a finding to a checked fix.
Know what was checked.
See the source version assessed, the checks performed and any missing evidence. Incomplete checks stay visible.
Follow a fix through.
Use supported repeat checks to review changes against the relevant source version. Keep the result and remaining work together.
Current pilot scope
Clear coverage from the start.
Repository checks.
Selected source, dependency and configuration checks, with findings and coverage reports. Support depends on file formats, permissions and enabled checks.
Cloudflare context.
Selected Worker and Pages metadata, with optional account-security observations. Deeper production configuration checks are planned.
App behaviour.
Existing isolation and recovery tests cover dedicated Pack Money test environments. Profiles for other apps are planned.
Native iOS assessment and Swift dependency vulnerability checks are being expanded. Full mobile coverage is not available in this pilot. A completed check does not guarantee that an app is secure.
Where we’re heading · planned
A view of your complete product.
Your mobile app, web frontend and backend belong to the same customer experience. We’re building toward checks that reflect those connections.
That means deeper Cloudflare configuration reviews and repeatable checks for permissions, sharing, sessions and billing boundaries. For a coaching app, that could include checking that a coach can access only the clients who have granted access. These broader capabilities are planned, with scope confirmed before use.
Choosing your security tools
Already using a free scanner?
Tools such as Aikido offer substantial free scanning. They can be a good fit when broad automated scanning is what you need.
Suhail’s focus is small app studios: the product behind a finding, the version checked, the gaps still open and the follow-up. Our current pilot is narrower, and some checks overlap. The planned expansion brings more of your app’s behaviour and Cloudflare setup into that view.
Compare the coverage for your actual app. Suhail does not currently replace every scanner or a penetration test.
Comparison reviewed 16 October 2026. Aikido’s current plans · Suhail’s pilot scope
Plan previews
One product to a whole studio.
Protect
US$29/ month
1 product
- Up to 2 repositories
- 100 runs/month
- 250 Linux minutes/month
Multi-product
To be confirmed
For more than one product
- Price and allowances to be confirmed
Studio
To be confirmed
For a studio portfolio
- Price and allowances to be confirmed
Current entry preview: up to two repositories. Monthly runs are shared across repository scans, behaviour checks and extended reviews. Larger-tier terms remain to be confirmed.
Plan preview · planned allowances. Public checkout is not open yet. Cancel renewal at any time; paid access continues to the end of the paid period. No automatic overage charges.
Compare all plans →Meet NosyPup → · Public checkout is not open yet.
How every dataloup app is built
- It reports, it never concludes
- Gaps stay gaps
- Your data stays yours
- One clear action
