Launch guides for vibe-coded apps
Plain-English checklists for shipping apps built with Lovable, Bolt, v0, Cursor and Replit: security basics, Supabase rules, exposed keys, SEO and more.
Is my Lovable app secure? A practical check before launch
How to check a Lovable app for the most common launch-day security gaps: Supabase Row Level Security, exposed keys, public storage and missing headers.
Read the guide →Bolt.new app launch checklist
A step-by-step checklist for shipping an app built with Bolt.new: secrets, database rules, SEO and share previews, mobile, speed and broken links.
Read the guide →Supabase RLS checklist for vibe-coded apps
How to confirm Row Level Security is on and your policies actually protect user data in a Supabase app built with an AI tool.
Read the guide →Exposed API keys in AI-built apps: how to check
How to find secret keys that ship to the browser in apps built with Lovable, Bolt, v0, Cursor or Replit, and what to do if you find one.
Read the guide →Pre-launch checklist for Cursor, v0 and Replit apps
A pre-launch checklist for apps built with Cursor, v0 or Replit: environment variables, auth, security headers, SEO, mobile and performance.
Read the guide →