Free · 2 business days
Preflight check before you launch.
Send us your live app. An engineer reviews it from the outside, the way an attacker or a search engine would, and emails you a short readiness report with the fixes that matter most.
No logins, no repo access, no obligation. We never test beyond what's publicly reachable.
What we check
Six areas, one score.
Exposed secrets
API and service keys shipped in your JavaScript.
Security headers
HTTPS, redirects, and browser protections.
Open data
Public database endpoints and missing access rules we can detect from outside.
Performance
Load time, bundle size, and Core Web Vitals.
Payments and auth
Common misconfigurations visible from the outside.
Prioritised fixes
What to fix first, and roughly what it costs.
preflight / example-app.lovable.app
Example report
46/100
Not ready for launch
- Secrets in client bundle2 keys exposed
- Row-level security3 tables open
- Payment webhooks verifiedNo signature check
- Rate limiting on AI routesMissing
- Security headersOK
- HTTPS and redirectsOK
Want the full picture?
Preflight looks from the outside. A Scan goes through your code, database, and infrastructure, and its fee is credited toward Launch.