# Your security scan checks for unauthorized credit usage

By Steven Van · 2026-09-04

Base44's security scan now flags app features that let outsiders spend your credits without signing in, with a one-click fix.

A security scan on [Base44](<https://creatorstoolbox.com/tools/base44>) now includes a Credit protection check, which looks for places where an app's credit-using features, such as AI, image generation, or email, can be reached from outside the app without anyone signing in. Anyone who finds one of these could run it and spend the app's integration credits.

The finding is titled "Prevent unauthorized credit usage" and rated High severity. Depending on the app, the fix is either a one-click **Fix** that restricts access to those features without changing how the app works, or a **Resolve with AI** that moves the exposed calls into the app's backend. If the live app is running an older version than the latest changes, the scan instead prompts to publish changes first. The [security scan](<https://docs.base44.com/Setting-up-your-app/running-a-security-scan>) is available on all plans, including the free plan.

![The Security page, where you run scans and review issues](<https://mintcdn.com/base44/qpfiJJbhmflQdf0B/images/run-security-scan.png?fit=max&auto=format&n=qpfiJJbhmflQdf0B&q=85&s=b3261ca5bbe5f1021b2dbfd109e3feef>)

The Security page, where you run scans and review issues

![Reviewing and fixing security scan issues](<https://mintcdn.com/base44/vicdF2iVKo0vDHkc/images/fix-security-scan-issues.png?fit=max&auto=format&n=vicdF2iVKo0vDHkc&q=85&s=9facc5240621e15122d9a6981873dbcf>)

Reviewing and fixing security scan issues

![Base44](<https://www.google.com/s2/favicons?domain=base44.com&sz=128>)

Base44

AI app builder — describe what you want and get a fully functional web app in seconds, no coding required.

[View Base44 →](<https://creatorstoolbox.com/tools/base44>)

Sources

[Original source](<https://docs.base44.com/Setting-up-your-app/running-a-security-scan>)

[Read Your security scan checks for unauthorized credit usage on Creators Toolbox](<https://creatorstoolbox.com/blog/base44-your-security-scan-checks-for-unauthorized-credit-usage>)

---
Canonical source: https://creatorstoolbox.com/blog/base44-your-security-scan-checks-for-unauthorized-credit-usage