Check your AI-built app before you launch.
Check and Launch helps you find overlooked launch essentials, spot potential issues, and know what to fix first, so your app is ready for its first users.
Free 2-minute check Plain-English explanations Prompts for your AI builder
Row Level Security is enabled on every table
- Why it matters
- Without RLS, anyone with your public key can read or change rows in that table.
- How to check
- In Supabase, open Table Editor or Authentication → Policies. Every table should show RLS as enabled.
- How to fix
- Ask your AI builder, then review the policies it creates.
Enable Row Level Security on every table and add policies so users can only read and edit their own rows.
Written for apps built with
- Lovable
- Bolt
- Replit
- Base44
- Claude
- Cursor
- Supabase
- Stripe
What you get
60 practical checks
Data and access, sign-in, payments, mobile, accessibility, SEO, legal, and more.
Clear explanations
Why each item matters and how to check it yourself, in plain language.
Prompts for your AI builder
Know exactly what to ask Lovable, Claude Code, or Cursor to fix each gap.
A launch-day plan
A step-by-step order for the day itself, so nothing is left to memory.
Find the gaps before your users do.
Working is not the same as ready. AI builders get you to a working app quickly. The gaps that remain are often hard to see from the inside, because you already know how everything is meant to work. These are the ones that come up most often.
Data that is more open than you think
Tables without Row Level Security can be read by anyone with your app's public key.
Emails that never arrive
Default email senders are meant for testing. Real users may never receive their confirmation link.
Links that point to the wrong place
Password reset and sign-up links can still lead to a preview URL instead of your live site.
Pages that break on a phone
A layout that looks fine in a desktop preview can hide buttons or scroll sideways on mobile.
Blank link previews on launch day
Without the right tags, your launch post shows no title or image when it is shared.
No clear way to get help
When something goes wrong, users need to know how to reach you, and you need to know it happened.
Check your app in two minutes.
Seven questions from the checklist about the gaps that come up most often. For anything you can't answer yes to, you'll see why it matters, how to fix it, and what to ask your AI builder.
Your answers stay in this browser. Nothing is sent or stored.
Question 1 of 7
Choose an answer to go to the next question. "Not sure" is a fine answer.
-
Row Level Security on every table Blocked
Without it, anyone with your public key can read your data.
Fix guide → -
Auth links point to your live site Needs attention
Reset links can still open your preview URL.
Fix guide → -
Emails sent through your own provider Done
Built-in senders are for testing and have low limits.
Fix guide →
Know what to check. Know how to fix it.
60 checks across ten areas, written from real launches with AI builders. Each one has three parts.
- Why it matters: what can go wrong if you skip it, in plain language.
- How to check: a simple test you can do yourself, usually in a few minutes.
- How to fix: where to look, or what to ask your AI builder to change.
The ten areas
- Data and access
- Sign-up, sign-in, and email
- Payments
- Product and user journeys
- Mobile and accessibility
- Content, SEO, and sharing
- Legal, privacy, and trust
- Support and contact
- Hosting, monitoring, and recovery
- Launch communications
Made for people who ship with AI.
Founders building with AI
You built it by vibe coding with Lovable, Bolt, or Claude, and didn't write every line yourself. Each fix tells you what to ask your AI builder.
Indie hackers
You're preparing a SaaS or web app launch and want a fast, opinionated list without padding.
Freelancers and agencies
You hand sites over to clients and want to catch the gaps before they do. Run the same checks on every client project.
Most AI-built apps are not broken. They are unfinished in ways that are hard to see from the inside. After building and launching with Lovable, I kept noticing the same gaps, so I put my launch checklist into one place.
Start free. Go further when you're ready.
Begin with the free check. Pro and Agency open with the Check and Launch app. One-time prices, no subscription.
Free
Find the most common gaps in two minutes.
- 7 questions on the gaps that come up most
- Why each gap matters and how to fix it
- Prompts to copy into your AI builder
- No sign-up. Answers stay in your browser.
The free app includes 11 core checks, a dashboard, and backup. Or take the 2-minute check.
Pro
For founders who want to check everything before launch.
- All 60 checks across ten areas
- Why, how to check, and how to fix for each
- What to ask your AI builder for each fix
- Lovable and Supabase specific guidance
- Launch-day plan and launch kit templates
Coming soon. We'll email you once, when it's ready.
Agency
For freelancers and agencies launching client apps.
- Everything in Pro
- Unlimited client projects
- A branded client report with your logo
- The same process for every client launch
Coming soon. We'll email you once, when it's ready.
What Check and Launch does, and what it doesn't
Check and Launch is guidance, written for people who didn't write every line of their app. You stay in control of your app and your information.
What it does
- Gives you a clear list of common launch gaps, with why each matters, how to check it, and how to fix it.
- Tells you what to ask your AI builder, so you can fix things without writing code.
- Helps you hand the checks to your own AI builder, then explains what it reports in plain language.
What it doesn't do
- It doesn't scan or test your app automatically. You or your AI builder does each check.
- It never asks for access to your code, database, or accounts.
- It doesn't certify that your app is secure, compliant, or ready. It's not a security audit or legal review.
Your information
- The free self-check runs in your browser. Your answers aren't sent or stored.
- The app saves your projects in your browser. This site and the app make no AI calls, and nothing you enter is sent to us or to an AI provider.
- Payhip handles payments. If you join the waitlist, your email is only used to tell you when Pro is ready.
I didn't build with Lovable. Is this still useful?
Yes. Most checks apply to any web app. The Lovable and Supabase sections include specific settings; if you use Bolt, Claude, or another builder with a similar stack, the same principles apply.
I'm not technical. Will I understand it?
Every check is written in plain language. Where a fix needs a change to your app, it suggests what to ask your AI builder to do.
Is this a security audit?
No. Check and Launch helps you find common launch problems. It is not a penetration test, security audit, or legal review, and it cannot guarantee your app is secure or compliant.
Do you need access to my code or database?
No. Check and Launch never asks for access. You, or your own AI builder, do each check, and Check and Launch never sees your app's code.
I build sites for clients. Can I use it with them?
Yes. Pro covers your own client projects, and Agency adds unlimited client projects and a branded client report. Please don't resell or share the checklist itself.
Is it a subscription?
No. Pro and Agency are one-time purchases. You pay once for the version and features described when you buy.
Will I need an account?
No. You'll unlock Pro with a licence key from your purchase email. There's no password, and your projects stay in your browser.
What if it isn't useful to me?
For Pro and Agency, get in touch within 14 days of purchase and you'll get a full refund. See the refund policy.
Before you share the link
Take a moment to consider: if a new user signed up today, what is the first thing likely to go wrong?
Check and Launch helps you organise launch preparation. It does not certify security, legal compliance, or product quality. Check and Launch is independent and is not affiliated with Lovable, Bolt, Anthropic, Supabase, or Stripe.