Questions, answered
The things people ask before running a scanner on their own code. Short answers; the rest is on the home page.
- Does npx launchprep upload my code?
- No. The free scan runs entirely on your machine and uploads nothing — read-only, writing nothing and sending nothing.
- Is $29 a subscription?
- No, it is one-time. $29 once unlocks all 290 checks, five deep scans, a dated shareable report, and a CI gate.
- Do I need to be a security expert to read the results?
- No. Every finding names the consequence in plain English, with a file, a line, and a fix.
- Will it flag things that do not apply to my app?
- No. Launchprep detects what you built and runs only the checks that can apply, then lists what it skipped and why.
- Can it find an exposed database or a leaked API key?
- Yes. Exposed keys, public storage buckets, and row-level-security gaps are among the checks.
- Which apps is it for?
- Apps built with AI tools — Cursor, Claude, Lovable, v0, Bolt, Replit — that are about to launch. Node, Next.js, Django, Rails and Supabase are detected automatically.
- Is it safe to run on my codebase?
- Yes. The free scanner is read-only and cannot write, execute, or open a network connection — enforced by a build check on every release.
Run every check that applies to your project, on your machine, free and unlimited:
npx launchprep