For Windsurf
Hack your Windsurf app before someone else does.
Apps built with Windsurf ship fast. These are the problems we check for first.
Common risks
- Generated API routes without auth
- Leaked keys
- Missing headers
Checks that matter most
- ERT-ACCESS-005Admin route reachable without authHigh
- ERT-SECRETS-001Server secret in client JavaScriptCritical
- ERT-CONFIG-001Missing or weak Content-Security-PolicyMedium
Emerald Red Team isn't affiliated with or endorsed by Windsurf.