Studio

SEO and security scans

Studio can analyze your project source for common SEO gaps and security anti-patterns. Both scans run entirely against your source files without sending a request to any external service and without spending any credits.

SEO scan

The SEO scan checks your project files for common issues that affect search engine visibility:

Missing or empty <title> elements
Missing <meta name="description"> tags
Images without alt text
Heading hierarchy issues (for example, skipping from H1 to H3)
Links without descriptive text

The SEO scan is available to all projects and all plans. To run it, open the project and go to the SEO tab in the right panel. Click Run scan to get a fresh result.

The scan result is cached so it remains visible when you reopen the project without having to re-run it every time. Run a fresh scan after a build that changes the markup.

Security scan

The security scan checks your project source for common client-side security patterns that may introduce risk:

Hardcoded secrets or API keys in source files
Use of dangerouslySetInnerHTML with unsanitized input
Calls to eval or Function() with dynamic input
Insecure postMessage receivers without origin checks

The security scan is available to all projects and all plans. To run it, open the Security tab in the right panel. Click Scan now to get a result.

Note

These scans perform static analysis on the source files Studio has generated. They do not test the running app and do not replace a full security review. Use them as a quick check to catch obvious issues before publishing.

Cost and limits

Both scans cost no credits. They are rate-limited to 10 scans per project per 15 minutes to prevent automated polling.