The ops floor for
AI-built apps.

Scan for the security holes AI code ships with, open the fix as a pull request you approve, watch your live app for regressions, and keep backups and compliance handled. One subscription.

Run a free scan See how it works

What it covers

The holes AI-generated apps ship with

Row-level security gapsCredential functions open to anyonePrivilege escalationPublic storage bucketsUnpinned search_pathLive-app regressionsEncrypted backupsPrivacy policy and termsData-deletion endpointRow-level security gapsCredential functions open to anyonePrivilege escalationPublic storage bucketsUnpinned search_pathLive-app regressionsEncrypted backupsPrivacy policy and termsData-deletion endpoint

How it works

From first connection to always-on protection, in four steps you stay in control of.

1

Connect your app

Point us at your repo, database, and deploy. If you built it in MCPity, it is already linked.

2

Scan finds the real issues

Exposed credential functions, missing row-level security, privilege escalation, and public storage, with plain explanations.

3

Approve the fix

Each fix arrives as a draft pull request. You review and merge. Nothing is merged for you.

4

Stay protected

Scheduled monitoring, backups, and compliance run on their own, so protection continues after launch day.

What is covered

Everything an app needs to stay safe

Four pillars, one subscription. Built for apps you shipped from anywhere, and native to work you built in MCPity.

Scan and auto-fix

Finds the vulnerability classes AI-generated apps ship with and writes the fix as a draft pull request you review and merge. You stay in control, and nothing is auto-merged.

AI SRE

Scheduled synthetic click-throughs of your live app catch crashes and regressions before your users do. Each finding comes with a diagnosis and a proposed fix.

Backups and one-click restore

Scheduled encrypted backups of your database, restored in one click when you need them. No scripts, no scramble.

Compliance pack

A privacy policy, terms, and cookie consent generated from your app's actual stack, plus a hosted data-deletion request endpoint, kept current as laws change.

One free scan

See exactly where your app is exposed before you pay anything. Fix the first finding with credits, or subscribe to keep everything protected.

Share your grade

Every scan gives you a clean Security Grade card you can post. It shows your grade and progress only, never any finding details.

Free scan

What a free scan shows you

Run one scan free and see exactly where your app is exposed, in plain language. Fix the first finding with credits, or subscribe to keep everything protected.

Run a free scan

Concrete checks

  • Row-level security gaps
  • Credential functions callable by anyone
  • Profile privilege escalation
  • Public storage buckets
  • Functions with an unpinned search_path

One plan, everything protected

No tiers to decode. Continuous protection lives on the subscription, and one-off jobs are available on credits.

MCPity Security

$120/mo

Everything included. Pay-as-you-go extras with MCPity Credits.

  • Vulnerability scanning
  • Fix pull requests
  • AI SRE monitoring
  • Encrypted backups
  • Compliance pack
Start MCPity Security

Extras run on MCPity Credits: a single backup and restore, a one-time policy pack, a deep scan. The subscription covers continuous protection; Credits never buy down the subscription.

Ready when you are

Own your app's security floor

Scan, fix by pull request, monitor, back up, and stay compliant, without leaving your workflow.

Start MCPity Security See pricing