Ship fast. Know what you shipped.
Your AI can build the app. Intersite understands the code, dependencies and live systems around it—then finds the failures your customers would otherwise discover first.
See what matters before your first customer does.
acme/storefront · main · scanned 4 min ago
7 deadlines beaten
Chat!
1 dependency
src/chat.ts:42
openai@4.52
gpt-4-0613
OpenAI
retires in 22 days
Chat replies stop
Checkout
2 dependencies
src/checkout/create.ts:84
stripe@14.25
2024-06-20
Stripe
major on 14 Nov
Payment failure
src/middleware.ts:12
@clerk/nextjs@5.2
auth()
Clerk
Not tracked
Sign-in failure
Signup
1 dependency
src/auth/signup.ts:31
@supabase/supabase-js@2.45
auth.signUp
Supabase
RLS checks pass
Data leak
Emails
1 dependency
src/emails/send.ts:18
resend@3.2
emails.send
Resend
Not tracked
Notification not delivered
Forecast · next 90 days
2 upcoming
Forecast · next 90 days
2 upcoming
- gpt-4-0613 off23 Oct
- Stripe major14 Nov
- clear
- Features: Chat, Checkout, Signup, Emails
- Provider OpenAI: a change with a deadline affects this app — retires in 22 days
- Provider Stripe: a change ahead may affect this app — major on 14 Nov
- Provider Clerk: not tracked
- Provider Supabase: named checks passed — RLS checks pass
- Provider Resend: not tracked
- Finding src/chat.ts:42: Your code calls gpt-4-0613 in 1 place. It shuts down on 23 Oct.
- Forecast: gpt-4-0613 off on 23 Oct
- Forecast: Stripe major on 14 Nov
- Forecast: clear
Intersite / Acme
- 12
- dependencies
- 87
- usages
- 1
- attention
- stripe@14.25
- openai@4.52
- resend@3.2
- @supabase/supabase-js@2.45
- vercel
- aws-sdk@3.600
Everything else is quiet · checked 2m ago
Found before your first customer did.
Intersite follows real product paths across your code and services, then explains the business consequence and the fix.
Acme / Pre-launch review
Ready for review
- Systems
- 7
- Paths traced
- 34
- Findings
- 3
Checkout
stripe webhookPayment success is not verified
- Used in
- src/api/stripe/webhook.ts:61
- Powers
- Paid plan activation
- Impact
- Revenue at risk
- Why you care
- The handler trusts the request body before checking Stripe's signature.
- Evidence
- Signature verification is missing on the payment success path.
- What to do
- Verify the webhook signature before activating a subscription.
View evidenceOpen GitHubCustomer data
supabase policyTenant boundary is incomplete
- Used in
- projects_select_policy
- Table
- public.projects
- Impact
- Data exposure
- Why you care
- The read policy allows signed-in users without matching their tenant.
- Evidence
- The policy has no tenant_id = auth.uid() constraint.
- What to do
- Scope reads to the current tenant and retest access.
View evidenceOpen GitHubAuth email
resend fallbackDelivery failure is silent
- Used in
- src/auth/send-link.ts:38
- Powers
- Passwordless sign-in
- Impact
- Users locked out
- Why you care
- A rejected delivery is logged but never retried or surfaced.
- Evidence
- The send error path returns success to the caller.
- What to do
- Fail visibly and wire a retry or fallback provider.
View evidenceOpen GitHub
Code, policies, webhooks and delivery paths checked
Review all findingsYour AI can build the app. Who checks the app?
Generated code can be correct one file at a time and still fail as a product. The missing layer is understanding how code, services and customer outcomes connect.
AI builds
- UI
- API calls
- Database queries
- Checkout flow
AI does not know
- Payment authenticity
- Tenant isolation
- Failure handling
- Customer consequence
Passing checks do not mean the product works.
Security scanners, uptime tools and tests each see one layer. Intersite follows the complete path from code to service to customer outcome.
What individual tools see
all green
- SnykdependencyPackage has no known CVE
- AikidosecurityNo exposed secret detected
- DatadogruntimeEndpoint responds with 200
- CItestsUnit suite passed
- VerceldeployProduction deployment ready
- StripewebhookEndpoint is reachable
- ResendemailRequest accepted
- SupabasedatabasePolicy syntax is valid
What the product can still do
3 business risks
Checkout can activate without proof of payment
↳ stripe/webhook.ts:61
Revenue at risk
A signed-in user can cross a tenant boundary
↳ projects_select_policy
Customer data exposed
A failed magic link still returns success
↳ auth/send-link.ts:38
Users locked out
Every finding connects evidence to a concrete failure mode—not another dashboard alert.
From change to consequence.
Intersite doesn't stop at a file or alert. It follows the path to the customer and business outcome.
- Code● live
- where the assumption lives
- Product
- which path depends on it
- Business
- what failure actually costs
Service
payment_intent.succeeded
Stripe webhook
Trust boundary
missing before body parse
signature verification
Code
activateSubscription()
src/api/stripe/webhook.ts:61
Product
customer receives access
Paid plan activation
Business impact
unverified events can activate plans
Revenue at risk
Know what changed before your customers do.
Intersite checks continuously and only interrupts when something touches your code. Everything else stays in the log.
Today
Everything else is quiet.
- 09:41Stripe API change detectedaffects checkout
- 09:18OpenAI model retirement detectedaffects AI summarisation
- 08:52Supabase SDK updatedno affected usage
- 07:44Resend checkedunchanged
- 06:31Vercel checkedunchanged
- 06:00Scan completed412 files · 38s
What Intersite watches.
- APIsTrack versions, changes and deprecations.POST /v1/payment_intents4 tracked
- SDKsKnow when the libraries your software relies on change.stripe@14.25.05 tracked
- AI modelsTrack retirements, versions and provider changes.gpt-4o-mini4 tracked
- WebhooksCatch payload and event changes before handlers break.payment_intent.succeeded3 tracked
- Cloud servicesFollow the platforms your app is deployed on.vercel · aws2 tracked
- Site infrastructureWatch DNS, SSL and redirects your users hit first.acme.com · TLS 1.33 tracked
Built for the way modern software gets built.
AI coding agents can write code faster. Intersite helps you understand what that code depends on.
- GitHubAvailable now
- Claude CodeComing soon
- CodexComing soon
- CursorComing soon
- CLI + MCPComing soon
Codex changed
src/payments/create.ts
↓
Intersite detected
Stripe API change
↓
Affected
Checkout
$ intersite deps scan Scanning acme-app... ✓ Stripe ✓ OpenAI ✓ Resend ⚠ 2 relevant changes found
{
"provider": "stripe",
"severity": "high",
"affected": "checkout",
"file": "src/payments/create.ts:84"
}One continuous understanding of your product.
Connect → Understand → Detect → Fix → Verify
01
Connect
Connect GitHub or paste your
package.json.acme/acme-app
read-only · main branch
02
Understand
Intersite identifies the APIs, SDKs and models your app actually uses.
stripe14 usages
openai6 usages
resend3 usages
03
Detect
Find gaps across code, configuration and connected systems.
⚠ 1 requires attention
● 11 quiet
04
Fix
Get the cause, evidence and smallest safe action.
verifyWebhookSignature()
05
Verify
Check the product path again, not just the changed file.
outcome protected
We don't need your source code.
Intersite uses read-only GitHub access. Source code is parsed to identify dependency usage and then discarded. We retain extracted dependency metadata, not your source files.
- Read-only
- GitHub access
- No source storage
- Files discarded after parsing
- Extracted usage only
- e.g. stripe → create.ts:84
Start free. Keep watching when it matters.
Free
£0
For trying Intersite.
- ·1 repository
- ·All initial providers
- ·Dependency scan
- ·Weekly digest
- ·30 days history
Pro
Most popular£19/ month
For founders and individual developers.
- ·5 repositories
- ·Instant alerts
- ·Email + Slack
- ·1 year history
- ·CLI
- ·API
Team
£59/ month
For lean engineering teams.
- ·25 repositories
- ·10 seats
- ·Instant alerts
- ·Slack
- ·Webhooks
- ·2 years history
Annual billing saves 2 months.
Free tools for things developers hate checking manually.
- API DiffCompare API specifications.openapi.v1 ↔ v2Try free
- Webhook TesterInspect webhook requests.POST /hooks/stripeTry free
- Redirect CheckerFind redirect problems.301 → 302 → 200Try free
- SSL CheckerCheck certificates.expires in 42dTry free
- DNS CheckerInspect DNS changes.A · CNAME · MXTry free
- AI Cost CalculatorEstimate AI feature costs.$0.15 / 1M tokensTry free
Intersite grows with your system.
- DependenciesKnow what changed.Available now
- ContractsKnow when an integration contract breaks.Next
- TransactionsKnow when your product actually stops working.Next
- MigrationKnow whether a site change is safe.Coming later
- AI CostKnow what running your AI actually costs.Coming later
Your system
Last checked 2 minutes ago
- 12
- Dependencies
- 87
- Usage sites
- 4
- AI models
- 0
- Critical issues
- 1
- Attention
Everything else is quiet.
Stop babysitting your SaaS.
Let Intersite watch the things your software depends on.