Docs

Get your project as a ZIP

VaultScan scans a .zip of your project. Pick the tool you built with and follow the steps — it takes a few clicks.

LovableReplitBoltCursorClaude Code

Lovable

Cloud builder

Lovable builds your app in the cloud. On a paid plan you can download the whole codebase as a ZIP from the code view; otherwise you can go through GitHub.

  1. 1Open your project and switch to the code view (the “</> Code” editor).
  2. 2From the code view, choose to download the full codebase — it saves a .zip to your computer. (Available on Lovable’s paid plans.)
  3. 3On a free plan? Connect GitHub from your project, let Lovable push the code to a repository, then on GitHub click “Code → Download ZIP”.

What it looks like

</> CodeDownload codebase

💡 Lovable keeps your secrets (API keys, database) out of the export for safety — that’s normal and fine for a scan.

Official guide ↗

Replit

Cloud builder

Replit runs in your browser. You can download the entire project as a ZIP in two clicks.

  1. 1Open your project (Repl) on replit.com.
  2. 2Open the Files panel, then click the three-dot menu (⋯) at the top of the file list.
  3. 3Choose “Download as zip” — your whole project saves to your computer.

What it looks like

Files ⋯Download as zip

💡 That’s the full project — no need to clean it up, VaultScan ignores things like node_modules automatically.

Official guide ↗

Bolt

Cloud builder

Bolt (bolt.new) builds in your browser and lets you download your source code as a ZIP.

  1. 1Open your project in bolt.new.
  2. 2Click the project title in the top-left corner.
  3. 3Click “Export”, then “Download” — your browser saves a .zip.

What it looks like

◷ Project title ▾ExportDownload

💡 Bolt’s export is just your source code (no git history or .env) — exactly what a scan needs.

Official guide ↗

Cursor

Desktop + Web

Cursor comes in two flavors: the desktop editor (your code is a folder on your computer) and the web / cloud agents at cursor.com/agents (which work on your connected GitHub repository).

Cursor desktop (your code is already on your computer)

  1. 1In Cursor your project is the folder shown in the sidebar (File → Open Folder shows where it lives).
  2. 2Open that folder in Finder (Mac) or File Explorer (Windows).
  3. 3Mac: right-click → “Compress”. Windows: right-click → “Send to → Compressed (zipped) folder”.

Cursor web / cloud agents (cursor.com/agents)

  1. 1Cursor’s web and cloud agents work on your connected GitHub (or GitLab) repository.
  2. 2Open that repository on GitHub.
  3. 3Click “Code → Download ZIP” to get the whole project.

What it looks like

📁 your-projectright-clickCompress

…or from the web version, via your GitHub repo:

GitHub repoCode ▾Download ZIP

💡 You can delete the node_modules folder before zipping to make it smaller — but you don’t have to, we skip it anyway.

Official guide ↗

Claude Code

Terminal + Web

Claude Code runs either in your terminal (editing files in your project folder on your computer) or on the web at claude.ai/code (which works in your connected GitHub repository).

Claude Code in your terminal

  1. 1Find your project folder — the one you started Claude Code in (your terminal’s current folder).
  2. 2Open it in Finder (Mac) or File Explorer (Windows).
  3. 3Mac: right-click → “Compress”. Windows: right-click → “Send to → Compressed (zipped) folder”.

Claude Code on the web (claude.ai/code)

  1. 1Claude Code on the web connects to your GitHub account and works in your repository.
  2. 2Open that repository on GitHub.
  3. 3Click “Code → Download ZIP” to get the whole project.

What it looks like

📁 your-projectright-clickCompress

…or from the web version, via your GitHub repo:

GitHub repoCode ▾Download ZIP

💡 The “.claude” folder is just settings — harmless to include. We only analyze your actual source code.

Official guide ↗

Got your ZIP?

Upload it and we’ll find the security holes.

Start a scan →