Paste your app's address. In about a minute you see what anyone on the internet can see: exposed keys, missing security headers, what Google and AI assistants can read, and how fast it loads on a phone. Free, no sign-up.
Works with Base44, Lovable, Bolt, Replit, Cursor and any public website. We only read what a browser can see: no logins, no attacks.
The same check, with the problems and fixes specific to your builder.
Built for apps made with AI builders, where the same few problems ship again and again.
Most serious problems in AI-built apps are in the code and the database: who can read whose data, whether a payment step can be skipped, what an admin screen lets anyone do. A scan from outside cannot see them.
Your builder's address (like yourapp.lovable.app) or your own domain.
The page, its headers, its public JavaScript, robots.txt and the sitemap, plus Google's phone test for speed and accessibility.
Every issue has a do-it-yourself step and a typical effort. One click sends the results to our team for a fixed price.
Yes. No sign-up, no email. Run it as often as you like within a fair limit per network.
Yes. It reads your app the way a visitor's browser and a search crawler do: the page, its headers, its public JavaScript, robots.txt and the sitemap. It never signs in, submits forms, guesses hidden paths or tries an attack.
If we find a secret key we report only what kind it is. The key itself is never shown or stored. Results are kept for 10 minutes so a repeat check is instant, then discarded. The share link runs the check again rather than storing a report.
Many AI-built apps send an almost empty HTML page and build the content with JavaScript in the browser. Google renders JavaScript later and less reliably, and many AI crawlers and link previews do not run it at all. Pre-rendering or server rendering your public pages fixes it.
Some builders do not offer header settings. If yours does not, a CDN such as Cloudflare on your own custom domain can add the headers in front of the app.
Yes, with Launch Monitor: $19 a month for up to 3 apps, included with Audit Pro, Agency and App Partner. It runs this same check every week and emails you the day a new serious issue appears, a score falls by 10 points or more, or the app stops answering. The monthly reminder from the email form stays free.
The Launch Check looks at your app from the outside in about a minute. The free AI code audit reads your code: database access rules, sign-in and roles, payments and workflows, with every finding tied to a file and line. Most serious problems in AI-built apps only show up in the code.
Your results are added to the enquiry form so you do not have to explain them again. You can edit them before sending. We reply with a fixed price in writing before any work starts.
