Loading...
Loading...
Experience. Create. Earn.
Creator-sovereign immersive experience platform. Virtual concerts, digital galleries, and events with 95% revenue share. Part of Sporus.
16
Live
1
Partial
0
Stub
0
Missing
15/15
Pages
1/17
APIs
92%
Security
Create concerts, galleries, workshops, meetups with cover images and scheduling
Upload and organize digital art with view tracking
Manage experiences and galleries with search and filtering
Server-side image compression and resizing
Install prompt, service worker, offline capability
Sell tickets with unique codes, attendance tracking
Tips with 95% revenue share, Stripe Connect
Full profile management with avatar, bio, tagline
Browse public experiences and galleries
Cross-platform following with personalized feed
Bookmark experiences and galleries
Database structure exists, client display limited
Passwordless passkey authentication
Auto-creates creator profile from NoxSoft shared profile on first visit — no onboarding required
Training consent, remix rights, style protection
Perceptual hash duplicate detection
Web Push via VAPID with service worker for event and gallery notifications
| Check | Status |
|---|---|
| CSRF Protection | Pass |
| Rate Limiting | Pass |
| Input Validation | Pass |
| Security Headers | Pass |
| Auth / Session | Pass |
| Encryption | Partial |
No rate limiting on API routes
Missing CSP header
check-copyright has NO auth — unauthenticated writes to content_hashes via service role; attacker can poison hash table
Passkey/WebAuthn RLS policies use USING(true) — any user can read/write all credentials
CORS set to * on agent-actions and llms.txt
tips/recent endpoint unauthenticated — exposes creator earnings totals publicly
content_ai_consent INSERT/UPDATE RLS open to all authenticated users
Notifications DB-only, client display incomplete
17
Total Routes
1
Rate Limited
15
Total Pages
15
Live Pages