Observed arrival · 2026-10-19
ShipSniffer checks whether vibe-coded apps are ready to launch
A launch-readiness scanner checks web apps and source code for exposed secrets, security gaps, and launch-polish issues.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- People launching apps built with AI coding tools
- Worth noticing
- The homepage reports that 37% of 99 scanned apps shipped a Supabase key; the extracted page does not include the full study methodology.
Field notes
URL scans load the app as a visitor and inspect pages, response headers, and JavaScript bundles; the page says these checks are passive and do not write to the target. Findings are ranked by severity and paired with prompts for Cursor, Lovable, or Bolt. The homepage also describes repository and ZIP scans for hardcoded secrets, database rules, auth gaps, and vulnerable npm packages; it says uploaded code is deleted after scanning in a temporary folder.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
◎NicheUnusually specific use
One card from the complete issue