What is LaunchGuard?

You build with AI, LaunchGuard makes sure it's safe to ship. It's a free security tool that checks your deployed app from the outside — paste a URL, get a report with fix prompts in 40 seconds. Built for apps made with Cursor, Claude Code, Lovable, and other AI coding tools, where shipping fast can mean skipping security without realizing it.

LaunchGuard doesn't need access to your code or your infrastructure. It tests what's actually running in production — the same things a stranger on the internet would find if they poked around.

Features

• Unprotected Endpoint Detection: Finds API routes that respond without authentication — the kind that let anyone burn through your OpenAI credits or send emails on your account.

• Supabase RLS Checker: Tests every table for anonymous read access. If your Row Level Security is misconfigured, LaunchGuard shows you exactly which tables are exposed and how many rows are readable.

• Leaked API Key Detection: Scans your page source for secrets that shouldn't be there — Supabase service role keys, Stripe secret keys, OpenAI keys, AWS credentials, and private key material.

• Public Storage Bucket Scanner: Checks whether your storage buckets are publicly listable. If someone can browse your uploaded files without logging in, you'll know.

• Exposed RPC Function Scanner: Tests each database function for anonymous access. If an RPC can be called without auth, it shows up in your report.

• Hidden Table Enumeration: Discovers unlisted database tables using PostgREST error hints. Tables you didn't know were there might be accessible to anyone.

Use Cases

• Solo founders and indie hackers: You shipped something with Cursor or Claude Code last week. It works. But is it safe? LaunchGuard answers that in 40 seconds so you can ship with confidence.

• Small teams building on Supabase: Your app has tables, storage, RPCs, and edge functions. LaunchGuard checks all of them from the outside and tells you what's exposed before your users find out.

• Anyone launching an AI-built app: AI coding tools are great at making things work. They're not great at security. LaunchGuard catches what they miss — exposed databases, leaked keys, unprotected endpoints.

Benefits

• Fast: Full report in 40 seconds. No setup, no integration, no signup required.

• Actionable: Every finding comes with a fix prompt you paste into Cursor, Claude Code, or ChatGPT. You don't need to be a security expert to fix the issues.

• Built for AI-coded apps: Specifically checks for the patterns that show up in vibe-coded apps — missing RLS, hardcoded keys, unprotected API routes.

• Free: The full scan is free. No credit card, no trial, no signup wall.

TL;DR

LaunchGuard exists because AI makes it easy to build and easy to ship — but it doesn't check whether you left something exposed. One URL, 40 seconds, and you know what needs fixing before strangers find it first. Try it at launchguard.dev.