Founder tool · Launch

Launch-Safety Checklist

Twelve checks for the things AI-built apps most often get wrong. Find out what to fix before real users and their data arrive.

  • 12 checks
  • About 10 minutes
  • Steps for your builder
  • No sign-up

What it checks

  1. 1.Are your secret keys kept out of the browser?Critical
  2. 2.Are database access rules switched on for every table?Critical
  3. 3.Have you tested that one user can't see or change another user's data?Critical
  4. 4.Are admin pages and actions protected on the server, not just hidden?Critical
  5. 5.Does sign-in work end to end: sign-up, email confirmation, password reset and log out?
  6. 6.Have you tested payments in test mode, including failed payments, before switching to live?
  7. 7.Have you set spending limits on AI and other usage-billed services?
  8. 8.Are backups on, and do you know how to restore one?
  9. 9.Will you find out when something breaks?
  10. 10.Are a privacy policy and terms of service published in your app?
  11. 11.Is your app on its own domain with HTTPS, and do its emails reach the inbox?
  12. 12.Are your forms and AI features protected from bots and abuse?