ZIP UPLOAD
Scan your code straight from a ZIP
Upload your app's source code as a ZIP and scan it for security issues. No repository connection needed: use an export from your builder or a local project archive.
Upload a ZIPSign in or create a SetRepo account to upload. Choose a .zip file; the upload form shows the current size limit.
How it works
- 01
Export your source code
Download your builder's code export or create a ZIP of your project. Include source files, dependency manifests and configuration; leave out large media, build output and installed dependencies.
- 02
Upload and set up
Drop the ZIP into the upload form or choose a file. Once it uploads, name your project and optionally add its live URL, then continue to scan setup.
- 03
Scan and check your fixes
Choose a free Quick scan or a paid Deep scan. Review the findings, update your code and upload a fresh ZIP when you rescan.
What your scan covers
- The code in your archive
- Quick scans check the uploaded code for exposed secrets, vulnerable dependencies and risky configuration. A paid Deep scan adds AI review of selected code for access-control and business-logic issues.
- Optional live-site checks
- Add your deployed site's URL to check its public-facing setup alongside the source code. Additional domain checks require ownership verification.
- A snapshot you control
- The scan uses the files you upload. It does not connect to your repository or pull later changes automatically; rescanning a ZIP project asks for the updated archive.
See coverage and limitations, how SetRepo handles your code and pricing.