Observed arrival · 2026-11-04

FlowWatch checks app sign-in and checkout

flowwatch.org Visit website

Editorial interest 80/100 Selection signal · not a rating of the site

A monitoring service for apps built with tools like Lovable, Bolt, Cursor, and Replit, with daily signup, login, Stripe test-checkout, and light leak checks.

Landing page captured for the 2026-11-04 issue.

For: Builders shipping apps with Lovable, Bolt, Cursor, or Replit
Worth noticing: Scheduled runs require domain verification; live Stripe keys or live Checkout sessions abort before the test card is entered.

Field notes

The documented flow asks users to verify control through a DNS TXT record, `/.well-known/flowwatch.txt`, or a meta tag before scheduled runs; passwords are described as encrypted with libsodium and omitted from logs. Its leak scan requests `/.env` and `/.git/config`, checks public source maps and JavaScript for key-shaped strings, and tests a discovered Supabase anon key against one row per table; findings are said to mask secrets except for their last four characters.

Observed signals

Read the marks

Editorial observations of this landing page, not a rating.

○OpenPublic substance visible

⊠LoginAccess appeared gated

$PaidCommerce or pricing visible

✦PrettyNotable craft visible

●ProPolished or operationally mature

◎NicheUnusually specific use

ƒJavaScriptBrowser-side code central

One card from the complete issue

Tattoo Roulette Enters the Museum

323,487 arrived 1,000 judged 976 catalogued Enter the complete issue