We scan your code for leaked secrets, then open the tunnel. Built for humans and the agents shipping with them.
AI coding tools put a public URL within reach in minutes — and the safety step got skipped. There's no layer between localhost and the internet that knows what's in your code.
The model takes the easy path and inlines an OpenAI key directly in App.tsx.
ngrok, a Cloudflare tunnel, a quick deploy — pick your flavor. None of them read your source.
Public URLs get crawled within minutes. Rotate-and-hope becomes the weekend plan.
One command. No config. No Docker. No vercel.json. It scans first, then opens the tunnel — and refuses to start if something critical is exposed.
One binary, no daemons, no signup. Works anywhere Node.js 18+ runs.
cloudflared --version
·
install: brew install cloudflared / winget install --id Cloudflare.cloudflared / Linux
git — only needed for the Security Pro --deep git-history scan
·
a package.json — used for framework auto-detection; without it pass --port manually
Or skip install and run one-shot with npx flieger share.
Next.js, Vite, SvelteKit, Nuxt, Express — all auto-detected. Anything else: --port 5173.
Safety pass runs, tunnel opens, you get a URL + QR. Ctrl+C to stop.
flieger share --port 5173Override the detected portflieger share --slug my-appStable subdomain · Proflieger share --jsonStructured output for AI agentsflieger check --deepFull scan, no tunnel · Security Proflieger fixApply available auto-fixesflieger listShow running sharesflieger stopStop all running sharesflieger historyPast shares + safety reports · Proflieger sits on top of Cloudflare's proven tunneling infrastructure. What's new is the gate — the thing that runs before the URL goes public.
--json for AI agentsDeterministic rules for the three ways vibe-coded apps get pwned most often. Every "my app leaked" thread on X starts with one of these.
Scans your source for OpenAI, Anthropic, Stripe, GitHub, Google, Slack, AWS keys. Flags plaintext hits so you can rotate before someone runs up your bill overnight.
Checks that .env is in .gitignore — and that it wasn't committed earlier in your history. If it was, flieger tells you exactly how to rotate and scrub.
Detects cors(), origin: '*', and friends — configs that let any site on the web call your API from a logged-in user's browser.
No API key. No SDK. No OAuth. Your agent runs flieger share --json, reads the URL from the structured response, and pastes it back — with any security findings already triaged. Non-interactive. Exit codes that mean something.
Done. Live at my-recipe-app.flieger.app.
I also fixed one issue — your .env wasn't in .gitignore, so your Supabase service role key would have hit the next commit.
Tunnel stays up until you close this terminal.
CLAUDE.md or .cursorrules:# Sharing / deploying the app When the user asks to "share", "deploy a preview", "send a link", or similar: 1. Run flieger share --json from the project root. 2. Parse the JSON response — use .url for the public URL. 3. Report the URL back. If .safety.criticals > 0, surface them first and ask before retrying. 4. If flieger isn't installed, run npm i -g flieger first.
Same snippet works in Cline / Aider system prompts. The agent needs no special permissions beyond "run shell commands."
The cost of a leak isn't theoretical — and the rate at which code is produced has jumped an order of magnitude. The safety layer has to keep up.
Scrapers hit new public subdomains in minutes, and rate limits don't save you on a fresh account.
Open CORS, missing auth, wide-open admin routes — "it's just a demo" is the exact time these ship.
Human review is no longer the last gate — so the gate has to be the tunnel itself.
Free covers the CLI and all three safety checks. Paid tiers add a stable subdomain and a deeper scan engine.
flieger share--json output*.trycloudflare.com URL*.flieger.app subdomainsyour-appflieger check --ci fails GitHub Actions on new leaksWorks the same for Pro and Security Pro. One license covers up to 3 machines.
Lemon Squeezy emails it after checkout. Also visible in the customer portal linked in the receipt.
Should show tier pro or security. Pro features (stable slugs, history) or Security Pro features (--deep, --strict, --ci) unlock automatically.
Switching laptops? Run flieger logout on the old one first to free up a slot. Cancel anytime in the Lemon Squeezy customer portal — link is in every receipt.
all plans · cancel anytime · EU VAT included
Can't find yours? Use the form below — you'll actually get a reply.
You can. ngrok and cloudflared give you a tunnel; they don't check your code for leaks before opening it. flieger's point is the safety pass that runs first — and the fact that it's one command instead of six flags.
No. All scans run locally. The tunnel forwards HTTP traffic between Cloudflare's edge and your dev server — flieger never reads, logs, or transmits your files. Open source: the published package is exactly what runs.
No tool will. flieger catches the three biggest, most-common ways vibe-coded apps leak — the ones on every postmortem thread. Deeper scans (RLS, rate-limit, cookie flags) are on the Pro roadmap. For the rest, you still need a human review — flieger just makes sure the obvious stuff never ships.
Yes. Free tunnels go through Cloudflare's Quick Tunnels, which are free for reasonable use. We don't charge for the free tier because there's nothing to charge for — no servers, bandwidth, or storage on our side.
The URL stops. Pro gives you a stable slug — your URL stays my-app.flieger.app across restarts — but the tunnel still needs your laptop running. Persistent 24/7 tunnels are on the roadmap.
Yes. The tunnel is language-agnostic. flieger auto-detects Next.js, Vite, SvelteKit, Nuxt, and Express; for anything else, pass --port 3000 (or whatever port your server is on).
Run flieger share --json in any agent environment — Claude Code, Cursor, Cline, Aider. You get a single JSON object with the URL, tier, and safety report. The tunnel keeps running until the agent kills it. A native MCP server is coming; for now stdout JSON is the contract.
Self-serve in your Lemon Squeezy customer portal — link is in your receipt. Cancel anytime; you keep Pro through the billing period. No calls, no emails, no dark patterns.
Bug reports, feature requests, "can you make it detect X" — drop a line. I read everything and usually reply within a day.