Your security scan checks for unauthorized credit usage
By Steven Van ·
Base44's security scan now flags app features that let outsiders spend your credits without signing in, with a one-click fix.
A security scan on Base44 now includes a Credit protection check, which looks for places where an app's credit-using features, such as AI, image generation, or email, can be reached from outside the app without anyone signing in. Anyone who finds one of these could run it and spend the app's integration credits.
The finding is titled "Prevent unauthorized credit usage" and rated High severity. Depending on the app, the fix is either a one-click Fix that restricts access to those features without changing how the app works, or a Resolve with AI that moves the exposed calls into the app's backend. If the live app is running an older version than the latest changes, the scan instead prompts to publish changes first. The security scan is available on all plans, including the free plan.
