Break a fake app.
Fix your real one.
A free, hands-on guide for Base44 builders. Play the stranger for 10 minutes, see exactly what leaks, then lock it down.
- 9 levels + a bonus
- Core hunt in 10 minutes
- Daily quiz
- Free, no sign-up
Choose your mode
Beginner: each level comes with a plain-English guided hint before you play the stranger, and the Hint button is always there.
The problem
A locked table is not a locked app.
Most leaks are not clever hacks. They are a permission left on "All Users", a function that never asks who is calling, a key sitting in the browser. Leak Hunt lets you see each one happen, then close it.
The hunt
Nine leaks. One bonus. Pick your first.
Levels 1 to 6 are the ten-minute core hunt. Levels 7 to 9 are the level-up pack for builders who use backend functions and teams.
How it works
Attack. Understand. Lock it.
01Play the stranger
Run a simulated attack on PetPals Bookings and see what a stranger sees. All fake, nothing real is touched.
02See the fix in Base44
Plain-English steps with the exact Base44 menu names, plus a prompt you can paste into the AI chat.
03Lock it and move on
Re-run the attack and watch it get blocked. Be honest about hints, and get a Leak Score you can share.
A quick honesty note
Tick “I found it” only if you worked it out yourself. Tick “I needed the hint” if the hint gave it to you. Your Leak Score is only useful to you if it is honest.
Questions
Is Leak Hunt safe to play?
Yes. Everything in Leak Hunt is simulated. The app (PetPals Bookings), the attacks and the leaked data are all hard-coded for teaching, and nothing here can touch a real app.
Do I need to sign up or know how to code?
No. There is no sign-up and no code to write. Each level uses plain English and the exact Base44 menu names, with a prompt you can paste into the Base44 AI chat.
Does this replace the Base44 security scan?
No. The scan is the authority. Leak Hunt helps you understand what the scan is telling you, so run the scan before you publish and again after significant changes.
How long does it take?
About 10 minutes for the six core levels, about 5 more for the level-up pack (levels 7 to 9), plus the bonus level if you want it. The daily quiz takes a minute. The checklist and the audit for your own app take a few minutes more.
Where does the information come from?
Base44's own documentation, checked on 16 Oct 2026. The sources are listed on the About page. Level 6 is a general security lesson and is labelled as such. Levels 7 to 9 and the daily quiz were checked the same way.