Next.js · Security · CLI

Catch

CSRF gaps, 

in your Next.js routes before they ship

Scans App Router, Pages Router, and API Routes — detecting missing auth, CSRF gaps, permissive CORS, hardcoded secrets, and more.