# PreflightVibe
> Automated launch check for vibe-coded apps (Cursor, Lovable, Bolt, Replit, v0, Claude Code). Paste a live URL for a plain-English A–F report on security holes, deploy blockers, and basic SEO/perf, plus Cursor/Lovable fix prompts.

## Site
- Home / free scan: https://preflightvibe.com/
- Guides: https://preflightvibe.com/guides
- Full docs for AI systems: https://preflightvibe.com/llms-full.txt

## Product
- Free quick scan: grade, severity counts, one sample finding
- Full launch report: $29 one-time (Stripe)
- Monthly re-check: $12/mo — weekly rescans + email alerts when configured; cancel anytime

## Who it is for
Indie hackers and founders who shipped with AI coding tools and need a pre-launch safety check without hiring a pentester.

## What it checks (passive, read-only)
- Secret patterns in HTML/JS (Stripe, OpenAI, Anthropic, Google, AWS, GitHub, Slack, Supabase JWTs)
- Security headers and HTTPS
- Exposed /.env, /.git/config, source maps (GET only)
- Basic SEO: title, meta description, viewport, robots

## What it is not
Not a penetration test. No destructive probes. No database writes. User must own/authorize the URL.

## Evidence of the problem (third-party)
- SymbioticSec: 98% of 1,072 vibe-coded Supabase apps had ≥1 flaw — https://www.symbioticsec.ai/blog/we-scanned-1-072-vibe-coded-apps-98-had-security-flaws
- Wiz: Moltbook Supabase RLS failure — https://www.wiz.io/blog/exposed-moltbook-database-reveals-millions-of-api-keys

## Contact
preflightvibe@mail.grokbot.com