# Scorpr
> Pre-Launch Security (SHIELD), Quality Control (PULSE), Technical SEO & GEO/AEO (RADAR) Auditing Platform & AI Fix-Prompt Generator (ARCHITECT).

## What is Scorpr?
Scorpr is an autonomous pre-flight inspection and remediation instrument for modern web applications and AI-generated SaaS projects. It catches silent database RLS exposures, leaked production keys in client bundles, blank Single Page Application (SPA) shells invisible to AI bots, and Core Web Vitals regressions BEFORE production launch.

## Core Engines & Modules

### 1. SHIELD (Zero-Trust Security Engine)
- **Supabase & Firebase RLS Validation**: Probes database endpoints for tables missing Row Level Security policies.
- **Client Bundle Secret Scanning**: Scans all compiled JavaScript chunks for leaked Stripe secret keys (`sk_live_`), OpenAI keys, AWS access keys, and unprotected environment variables.
- **Insecure CORS & Header Probes**: Audits missing `Content-Security-Policy`, `X-Frame-Options`, `Permissions-Policy`, and wildcard `Access-Control-Allow-Origin: *`.

### 2. PULSE (Headless Quality Control & Runtime QA)
- **Headless Chromium Execution**: Executes live headless browser crawl to detect unhandled client-side JavaScript runtime exceptions and hydration errors.
- **Core Web Vitals Telemetry**: Measures Time to First Byte (TTFB), Largest Contentful Paint (LCP), DOMContentLoaded, and cumulative layout stability.
- **Dead Click & Broken Link Verification**: Discovers broken links, unhandled buttons, and dead anchors across the DOM.

### 3. RADAR (Technical SEO & GEO/AEO Optimization)
- **SPA Shell Bot Invisibility Diff**: Analyzes disparity between initial raw HTML and rendered DOM to ensure LLM search engines (Perplexity, SearchGPT, Claude) can read primary content without JavaScript.
- **Automated `llms.txt` Synthesis**: Automatically drafts structured `/llms.txt` markdown documentation tailored for AI web agents.
- **JSON-LD Schema Graph Generator**: Generates Schema.org `SoftwareApplication` or `WebSite` structured data.

### 4. ARCHITECT (AI Remediation & Prompt Studio)
- **Master Cursor & Windsurf Prompts**: Compiles every finding into a single executable prompt ready to paste into AI code editors.
- **File-by-File Diffs**: Generates concrete before/after code blocks for instant bug resolution.

## Standard Pricing
- **Starter ($0/forever)**: Single-page instant scan with executive score HUD and top 2 critical issue alerts.
- **Single Launch Pass ($19 one-time)**: Full deep audit, unlocked Master Cursor Prompt, downloadable `llms.txt` & JSON-LD schema.
- **Pro Builder ($29/month)**: Unlimited audits, CI/CD webhook integrations, regression tracking.
- **Agency & Teams ($79/month)**: Branded reports, multi-project dashboards, priority queue.

## API Documentation
- `POST /api/backend/scans` - Dispatch new scan job. Payload: `{ "url": "https://example.com" }`.
- `GET /api/backend/scans/:id` - Retrieve real-time telemetry, JSONB findings, and fix prompts.
- `GET /api/backend/scans` - List historical audit records.