// sixthwall for Bolt

Is your Bolt.new app secure? Here is how to check

Bolt gets you from prompt to deployed app in minutes. The things it does not tell you about are the API key that shipped in the bundle and the API route anyone can call. SixthWall finds those and shows you the fix.

Three steps

  1. 01

    Download or push your Bolt project

    Export the project as a zip from Bolt, or push it to GitHub, and open the folder on your computer.

  2. 02

    Run init in the project folder

    Runs your first scan and sets up a pre-commit hook if the folder is a git repository.

    npx @sixthwall/cli init
  3. 03

    Paste the fixes back into Bolt

    Each finding comes with a prompt. Paste it into Bolt's chat and re-deploy.

What it looks for

The same rules run for every project, whatever tool wrote the code. These are the most serious ones. See all rules.

Questions

Does my code leave my machine?

No. The scanner runs locally, makes no network calls during a scan and needs no account. The only download is the scanner itself.

Is it free?

Yes. The editor scanner, the Claude Code integration, the pre-commit hook and the GitHub Action are free with no limits.