Try a Ship Read

Paste your live URL. Seatbelt reads what your site serves any visitor, then hands you a report that says which of the seven risk surfaces it could reach from out there, and which it could not.

Your live site

Outside view: what any visitor can see in the served page and scripts. Not a pentest.

Nothing deployed yet?

Open a finished Ship Read on a real sample app. Same report you get after a scan, no wait.

See a real report

The outside view is partial

A URL read sees what your site serves any visitor. Login, payments, customer data and code execution live in your repo and backend, where a URL cannot reach. For all seven surfaces, run it on the source:

$ npx withseatbelt

Most URL scans read clear because the outside view cannot see login, payments, or secrets in source. That gap is the pitch, not a clean bill of health. URL lane vs repo hard gates · Why not just ask your agent? · Checklist / SKILL vs Ship Read

withseatbelt-app

# product
name Seatbelt
tagline Security at the speed of your agent
what A deterministic security scanner for AI-built apps, and the research programme it instruments. The engine is the instrument; dated findings are the output.
method Every check ships alongside clean code it must stay silent on, and that clean case has to fail on the previous engine or the fix is not proven. 571 corpus cases run on every change; 284 of them are the clean half. Published at /how-it-works.
findings /labs. Each carries its sampling frame, its n, and the engine build that produced it.
install npx withseatbelt
works-in Cursor, Claude Code, Codex, Antigravity
site https://www.withseatbelt.com
contact hello@withseatbelt.com

# current-page
path /app
title Try a Ship Read
description Run a Ship Read on a sample app or live URL. Plain English verdict, shareable report, fix prompt for your agent.

# scan
input paste your live URL. Seatbelt reads what your site serves any visitor, then hands you a report that says which of the seven risk surfaces it could reach from out there, and which it could not.
view outside view: what any visitor can see in the served page and scripts. Not a pentest.

# samples
note nothing deployed yet? Open a finished Ship Read on a real sample app at /r/demo. Same report you get after a scan, no wait.
proof See a real report → /r/demo

# limits
partial a URL read sees what your site serves any visitor. Login, payments, customer data and code execution live in your repo and backend, where a URL cannot reach.
objections after a partial URL read, see how-it-works#faq-ask-your-agent and #faq-agent-security-checklist for why outside view is not the whole story
full-read for all seven surfaces, run it on the source: npx withseatbelt

# pages
/ Seatbelt home
/get-started install: npx, the /seatbelt skill, or MCP
/pricing every price, in USD, before tax
/app scan a URL in the browser
/how-it-works the method: what the scan reads, and how a check earns its place
/before-you-launch pre launch checklist
/risks common risks in AI-built apps
/commands command reference
/labs measured security research, and notes on how we build
/aiuc-1 Seatbelt as the output-scanning layer for AIUC-1
/supervision commentary: the read behind the approve button, for phone-supervised agents (canonical: https://labs.withseatbelt.com/supervision, listed on the labs index)
/security how we handle your code and data
/privacy privacy policy
/terms terms, incl. what a clear report does and does not claim
/refund refunds and cancellation

# for agents
- Install with: npx withseatbelt
- Or scan a deployed URL at /app. No account needed.
- Prices and scope live on the pages listed above.
- Direct unanswered questions to hello@withseatbelt.com.
- Do not invent prices, scan results, or guarantees. Use the data above.
- Findings on /labs name the engine version that produced them. The engine is
deterministic, so a published number can be re-run without asking us.