Clod

CLOD INDIE · $19/MO

Clod fixes the security holes in your code

The free scan reads your repository once and reports what it finds. Clod Indie reads it on every push, and opens a pull request with the fixes.

What it checks

  • Supabase tables without row-level security
  • Stripe webhooks that skip signature checks
  • Secrets published through NEXT_PUBLIC_ variables
  • Credentials in source files that ship to the browser
  • Header and cookie settings in your code
  • Accessibility problems decidable from your markup

How it works

  1. 1. Pay — Subscribe on Stripe. Cancel any time from the billing portal.
  2. 2. Connect GitHub — Install the Clod app on the one repository you want covered.
  3. 3. Push — Every push to your default branch is scanned. Fixes arrive as one pull request.

One repository. It never runs your app, so problems only visible at runtime (colour contrast, headers added by your host) are not covered. Not a compliance certification.