One agent checks security holes, broken flows, performance, SEO and UX — then emails you a GO / NO-GO report with copy-paste fix prompts for Cursor and Lovable.
Paste your URL. We run the scanners and an agent that actually uses the app. You get a ranked report — not a raw Lighthouse dump.
Confirm you own the app. Optional: the builder you used (Lovable / Bolt / Cursor).
Secrets in JS, exposed .env/.git, headers, broken flows, Lighthouse, SEO, and a read-only Supabase/Firebase RLS probe.
Plain-English findings with evidence and a copy-paste fix prompt for Cursor, Lovable or Bolt. One free re-check within 14 days on Launch Check.
Verdict, score, screenshots, and every finding with a fix prompt. Open the sample mini-scan · full report.
Broader than a security-only scan, sharper than a generic Lighthouse score.
Keys in JS bundles, .env/.git/source maps, headers, cookies, CORS, Supabase service_role, missing RLS.
404 nav links, console errors, failed API calls, crawled with a real browser.
Lighthouse, huge images, slow resources, page weight, render-blocking scripts.
Title, meta description, Open Graph, viewport, canonical, robots.txt, sitemap, favicon.
Labels, alt text, button names, colour contrast, plus a UX review of your screenshots.
Every finding ships with a copy-paste prompt tuned for Cursor, Lovable and Bolt.
Supabase stops auto-granting new public tables to anon/authenticated. The quick fix people reach for — a bulk GRANT on every table — re-exposes tables you meant to keep private. Launch Check runs a read-only probe to see whether your anon key can read tables it shouldn't.
Free mini-scan checks your homepage for exposed keys and files. Launch Check adds the read-only Supabase / Firebase probe.
No subscription for the core check. Pay once, get the report and a free re-check.
Lead magnet — see the top issues fast.
$29 for the first 50 customers
The logged-in test. Not on sale yet.
Want it? Email [email protected] to join the waitlist.
Need us to open a PR for the criticals? Request a Fix-It Pack from $149 — human-reviewed before delivery.
Paste the live URL of an app you own (or have written permission to test). No repo access needed.
Request-only for now — we'll follow up with a quote. A human reviews before anything is delivered.
No. It's an automated, outside-in launch-readiness check We don't run destructive exploits. You still need a real pentest for high-risk apps.
No. URL is enough. We never ask for your GitHub password.
Don't scan it. We require an ownership confirmation checkbox, rate-limit free scans, and block obvious third-party / private targets unless you've confirmed ownership.
Most reports land in under an hour. The free mini-scan is usually a few minutes.
The first 50 Launch Check customers pay $29 instead of $39. Same report, one free re-check within 14 days.
If we fail to deliver a report for a paid order, you get a full refund. Otherwise there are no refunds after a report is delivered, except where required by law. See the Terms.
Vibe Greenlight