# Launchprep

> A launch-readiness checker for apps built with AI. Reads your code, works out what you built, and runs only the checks that apply — then names what will break before real users hit it, with a file, a line, and a fix.

Launchprep is a read-only command-line tool. The free tier runs entirely on your machine and uploads nothing.

## Free and paid
- Free: 117 checks, unlimited scans, on your machine, no account. Run: npx launchprep
- Paid: $29 once (not a subscription) for all 290 checks, 5 deep scans, a dated shareable report, and a CI gate.

## What it covers
290 checks across 24 areas: AI operations (20), Real users (20), Django (18), Deployment (18), Rails (15), Data and scale (15), Next.js (14), Multi-tenancy (14), API design (14), AI safety (13), Supabase (12), File uploads (12), Data lifecycle (12), Infrastructure (11), Authentication (10), Legal and privacy (10), Incident readiness (10), Mobile (10), Secrets (9), Authorization (8), Payments (8), Rate limiting (7), UX readiness (6), Observability (4). Every check knows the condition it needs before it runs, so a project is only asked what it can actually fail — and anything that does not apply is skipped and named.

## Who it is for
Founders and developers who built an app with AI tools (Cursor, Claude, Lovable, v0, Bolt, Replit) and want to know what is unsafe before launch, without being a security expert. Findings are in plain English, each with a file, a line, and a fix.

## Standards
Every check maps to a published standard: the OWASP Top 10, the OWASP API Security Top 10, ASVS, CWE, and the privacy law that reaches your users (GDPR, UK GDPR, CCPA).

## Links
- Home: https://launchprep.dev/
- Pre-launch security checklist (free, standalone): https://launchprep.dev/checklist
- A real report, unedited: https://launchprep.dev/sample
- All checks by category: https://launchprep.dev/checks
- Writing (all articles): https://launchprep.dev/blog
- Suggest a check: https://launchprep.dev/suggest
- Is your vibe-coded app secure? How to actually find out: https://launchprep.dev/blog/is-my-vibe-coded-app-secure
- Your API key leaked to GitHub. Here is the 20-minute fix: https://launchprep.dev/blog/api-key-leaked-to-github
- Is your Base44 app secure? What to check before launch: https://launchprep.dev/blog/is-my-base44-app-secure
- Is your Claude Code app secure? What to check before launch: https://launchprep.dev/blog/is-my-claude-code-app-secure
- Is your Codex app secure? What to check before launch: https://launchprep.dev/blog/is-my-codex-app-secure
- Is your Lovable app secure? What to check before launch: https://launchprep.dev/blog/is-my-lovable-app-secure
- What it actually costs to have a model read your codebase: https://launchprep.dev/blog/what-a-model-costs-to-read-your-code
- The production mistakes that show up in almost every codebase: https://launchprep.dev/blog/what-breaks-in-production
- Do you need a privacy policy for your app?: https://launchprep.dev/blog/do-i-need-a-privacy-policy
- Is your Bolt app secure? What to check before launch: https://launchprep.dev/blog/is-my-bolt-app-secure
- Is the app you built with Cursor secure? What to check before launch: https://launchprep.dev/blog/is-my-cursor-app-secure
- Is your Replit app secure? What to check before launch: https://launchprep.dev/blog/is-my-replit-app-secure
- Is your v0 app secure? What to check before launch: https://launchprep.dev/blog/is-my-v0-app-secure
- How one missing max_tokens becomes a four-figure bill: https://launchprep.dev/blog/runaway-ai-bill
- The Supabase security checklist: RLS, service_role, storage buckets: https://launchprep.dev/blog/supabase-security-checklist
- FAQ: https://launchprep.dev/faq
- npm package: https://www.npmjs.com/package/launchprep
- Privacy: https://launchprep.dev/privacy
- Terms: https://launchprep.dev/terms