Give Claude a Heist Crew That Hacks Your App Before a Real Hacker Does: Set Up /heist in 2 Minutes

1. 1
   The scout maps your app: the routes, the login, the password reset, the database calls and the places that use secrets.
2. 2
   Three attackers each plan their own break-in. One goes after your code (the classic trick of typing SQL into a login box is one thing it looks for). One goes after your users (password reset links, sessions, trust in an email link). One pretends to be an ordinary user and tries to open other people's data.
3. 3
   The mastermind reads all three reports and tries to chain the holes together: which combination gets an attacker the furthest.
4. 4
   You get one report: the best break-in path, every hole with where it is and how to fix it, and the one change to make first.

It reads your code and nothing else. It never runs your app, never sends a request, never installs anything and never changes a file. It is a review on paper, so it cannot break your site while it looks.