slopticweb app slop checkersign in / up

How much slop is in your app?

Paste a link and Sloptic will poke at your app and score on the slop it finds. Lower is better.

Running a hackathon? Rank a whole event.

What is Sloptic?

Sloptic is a web app grader. It checks how much slop your web app has, like a leaked secret, a crash, a page taking forever to load, and more. As these are unacceptable to any app, Sloptic can grade any app you point it at no matter what it does.

  1. 01

    Paste a link to your app. No setup needed.

  2. 02

    Sloptic opens it in a browser and checks what any visitor sees.

  3. 03

    You get a score with a breakdown on every instance of slop found and what was tested.

What it checks

every check

Open an area to see what kinds of slop Sloptic checks for.

Getting this wrong costs the people who trusted your app. Sloptic looks for missing defenses and secrets left in the code you ship, following the OWASP Top 10.

See all 30 in this area.


Note that in anonymous mode, we only run the passive checks, i.e. checks that do not alter the site or send attacks. To run the active ones, log in and prove the site is yours.

What you get back

sample
https://example-hackathon-app.vercel.apppassive mode
41slop score
cleaner than 47%of passively graded apps
security3/11/17
quality2/9/15
performance1/7/12

failed passed did not applyfailed / applied / available. 27 of 44 applied.

no content security policyNothing tells the browser which scripts may run, so an injected one would.+8
no x-content-type-optionsA browser may guess a file's type, and guess it into something executable.+3
no referrer-policyEvery outbound click can leak the page it came from, query string included.+2
http conformanceA response says one thing in its status line and another in its body.+10
search engine basicsThe page is missing what a crawler needs to index it correctly.+10
largest contentful paintThe biggest thing on screen arrives late, so the page looks empty for a while.+8
clickjacking defenseThe app refuses to be framed by another site.0
images have alt textA screen reader can describe every image on the page.0

sloptic /ˈslɒp.tɪk/ noun

A coinage from slop, Merriam-Webster's word of the year for 2025 for the throwaway output that generative AI now produces in bulk, and optic, an instrument for bringing something into focus. The apparatus by which slop of the software kind, the app that ships functional but unhardened, is resolved into a single comparable score, serenely indifferent to whatever it was meant to be.