Trust center
Crewie Website
crewie.appLovable reports current security observations for this published deployment.
Connection and browser security
Protections observed in how the published app establishes secure connections and instructs browsers to handle its content.
- Insecure links are redirected to HTTPSChecked
If someone opens the app using an insecure HTTP link, they are automatically sent to the encrypted HTTPS version.
- Browsers stay on HTTPS after a secure visitChecked
After someone visits securely, their browser is told to keep using HTTPS when they come back.
- Browsers are told not to guess file typesChecked
The app tells browsers not to guess a resource's file type from its contents.
- Other sites are restricted from embedding this appChecked
Other websites are restricted from displaying this app inside their own pages, which helps reduce misleading overlays and clicks.
- The browser gets rules for what this page may loadChecked
The app provides browser rules for where scripts and other content may load from.
- Outgoing links share limited page informationChecked
When someone follows a link away from the app, less information about the page they came from is shared.
- The browser gets rules for sensitive featuresChecked
The app tells browsers which features, such as the camera, microphone, or location, may be used.
- The app's HTTPS certificate is validChecked
The app's web address has a valid certificate, so browsers can connect over HTTPS without a certificate warning.
- The first page checked avoided insecure resource linksChecked
On the first page Lovable checked, scripts, styles, frames, and other active resources were not loaded over insecure HTTP.
Deployment and runtime security
Observations tied to the current published revision, its software components, and scheduled health checks.
- Dependencies were checked for known vulnerabilitiesChecked
Lovable checked the software packages identified in this deployment against OSV, a public database of known vulnerabilities.
- A software inventory was created for this versionChecked
Lovable created an SBOM, which is an inventory of the software packages included in this published version.
- These facts are tied to the version that is publishedRecorded by Lovable
These observations are tied to the exact version of the app that is currently published.
- The software inventory matches the version that is publishedChecked
The software inventory was created for the version of the app that is currently published.
- Health checks are turned onEnabled
Lovable regularly checks whether the published app is responding.
- The latest dependency check found no known vulnerabilitiesChecked
In the latest complete check, Lovable did not find a known vulnerability in the software packages included in this deployment.
Access control and authorization
Database authorization checks and row-level protections observed for the published app.
- Record-level database protections are turned onChecked
Every database table Lovable checked has row-level security turned on. This enables access rules for individual records.
About this evidence
If a control is omitted, Lovable makes no claim about its state. This page reports platform-generated evidence, not a certification, compliance attestation, or independent assurance.
Help improve this page
Tell us what evidence would help people understand the security of this app.