Built an app with AI? Check who can see what
Start with the address you own and one thing a visitor should never see. Your connected assistant helps turn that rule into a test. Scantelio records what actually happened and what your developer should fix.
Check my AI-built app →What could a stranger open?
- Orders: sign in as a second customer and try the first customer’s test order.
- Documents: open a private download in a signed-out session.
- Keys: inspect public responses for an exposed test credential without sharing its value.
Prepare the check with your AI assistant
Sample conversation
My app works, but I don’t write code. Help me check whether a customer can open another customer’s order.
Assistant · Which order belongs to the first test customer? I’ll use it as the owner control, then propose the same read from the second account.
On first setup, verify the target and grant the assistant access to the intended project. Review the draft and confirm the run in your workspace.
Illustrative result and next action
A second customer downloaded the first customer's sample receipt. Ask your builder to check ownership before returning the file, then repeat the same download.
Questions before you start
Do I need to understand code?
Describe what belongs to each customer. A developer can supply staging access if you cannot create test accounts.
Which tool checks an app I made with AI?
Scantelio checks a target you control and records the observed behavior. Start with a URL; add an account when the question concerns a private screen.
Why test a button that already works?
A hidden button can still call an accessible endpoint. Try the same private object as a second customer and check the returned contents.
What should I give my AI builder?
Share the expected rule, the redacted observation and the test to repeat. Keep real customer records out of the prompt.
What can a public URL show?
An external check examines the reachable surface. Private workflows require authorized access and suitable test accounts. A source-code review or expert investigation has a different scope.
Can I reuse a prepared project?
Select the verified project, review the environment and permissions, then confirm the run. Recheck fixtures if the release changed the access model.