Preflyt

Preflyt is a pre-deployment security scanner designed to identify common security oversights in web applications, APIs, and backends before they go live. The tool focuses on detecting exposed secrets, open ports, unsafe defaults, and other easily overlooked misconfigurations that can compromise deployments. Preflyt emphasizes speed and simplicity, offering scans that typically complete in about 20 to 30 seconds and requiring no signup to use.

git repositories, backup and database dumps, source maps, and dependency files. It also examines server and network aspects like open database ports (covering MySQL, Postgres, Redis, MongoDB), the presence of development servers and admin panels, debug endpoints, Docker and Consul APIs, and HTTP security hardening measures. Specific checks include the presence of security headers (such as CSP and HSTS), CORS misconfigurations, insecure cookie flags, and server version leakage. Preflyt is positioned as a tool for catching obvious deployment mistakes rather than serving as a full penetration testing or vulnerability scanning solution.

Users can run Preflyt by scanning a URL using a single command, with the option to add a flag that blocks deployments if issues are found. The tool is compatible with automation agents like Claude Code, Cursor, Copilot, OpenClaw, and Cline, or any agent supporting AgentSkills, allowing integration into automated deployment workflows. Preflyt operates in a read-only mode, ensuring that it examines deployments without making changes.

The service is available for free and does not require users to create an account. Preflyt is intended for developers and teams seeking to enhance the security of their web applications, APIs, or backend services by quickly identifying and addressing common configuration errors prior to deployment.