For Bolt
Hack your Bolt app before someone else does.
Apps built with Bolt ship fast. These are the problems we check for first.
Common risks
- API keys bundled into the client
- Open backend endpoints
- Missing security headers on deploy
Checks that matter most
- ERT-SECRETS-001Server secret in client JavaScriptCritical
- ERT-ACCESS-005Admin route reachable without authHigh
- ERT-CONFIG-001Missing or weak Content-Security-PolicyMedium
Emerald Red Team isn't affiliated with or endorsed by Bolt.