# LaunchLatch

> LaunchLatch is a security and launch audit service for web apps built with AI coding tools (Lovable, Bolt, Cursor, Replit, v0), typically using Supabase and Stripe. It delivers a severity-ranked report within 24 hours, with copy-paste fix prompts for the customer's AI builder.

## Key facts
- Service: Vibe App Safety Check, an automated audit of code and live site, reviewed by a person before delivery.
- Checks: exposed API keys, missing Supabase row-level security (RLS), broken sign-in and admin roles, Stripe webhooks that don't unlock accounts, preview-vs-production deploy failures.
- Price: $49 for one app; $79 if the app uses payments or several services. Fix PR: $299 per critical issue (a pull request the customer reviews and merges).
- Beta: the first 5 audits are free in exchange for an honest testimonial.
- Turnaround: within 24 hours.
- Access needed: read-only GitHub access and the live URL. LaunchLatch never asks for passwords or secret keys.
- Limits: best-effort review; not a penetration test, compliance certification or legal advice.
- Contact: dtrunlimited@gmail.com · X: https://x.com/LaunchLatch · Reddit: https://www.reddit.com/user/LaunchLatch
- Not affiliated with Lovable, Bolt, Cursor, Replit, Vercel, Supabase or Stripe.

## Pages
- [Home](https://launchlatch.dev/): service overview, pricing, FAQ
- [How to fix an exposed API key in a Lovable app](https://launchlatch.dev/lovable-exposed-api-key-fix): rotate keys, move calls into Supabase Edge Functions
- [Supabase RLS checklist](https://launchlatch.dev/supabase-rls-checklist): enable RLS, owner-only policies, storage, testing with the anon key
- [Vibe-coded app launch checklist](https://launchlatch.dev/vibe-coded-app-launch-checklist): pre-launch checks for secrets, data, auth, payments, deploys
- [Cursor / Bolt app security checklist](https://launchlatch.dev/cursor-bolt-app-security-checklist): 10 pre-launch checks: env var secrets, server-side auth, RLS, rate limiting, CORS, input validation, dependency audit, error leakage, admin routes, backups
- [Tools we recommend](https://launchlatch.dev/tools): Railway, Supabase, Clerk, Lovable, Vercel, gitleaks/GitGuardian, with a safety tip each (contains affiliate links, disclosed)