Launching today
PreFlight Kit
Catch leaked keys and open Supabase tables before launch
2 followers
Catch leaked keys and open Supabase tables before launch
2 followers
A free local scanner for vibe-coded apps that finds leaked API keys, Supabase tables without RLS and secrets in git history, then writes a fix prompt for your agent. The $14.98 kit adds agent rules, an RLS pack, a launch checklist and a leaked-key runbook.
Payment Required
Launch Team
Customer.ioAutomate Messaging Everywhere — Startups Get 12 Months Free
Promoted
Hi Product Hunt, I'm Isaac, the maker of PreFlight Kit.
AI coding agents are great at "make it work" and bad at "make sure nobody else can". The same holes keep showing up in vibe-coded apps: service_role keys in the frontend, Supabase tables with RLS off, secrets sitting in git history, admin checks that only hide a button.
PreFlight is my attempt at a 10-minute check before you launch:
🔎 Free scanner: one file (preflight.mjs), zero dependencies, Node 18+. It runs on your machine and nothing is uploaded. You get a score and a PREFLIGHT-REPORT.md with a fix prompt to paste into Cursor, Claude Code, Codex, Lovable or Bolt. It exits non-zero on criticals, so it works in CI.
🧰 The $14.98 kit (one-time, use it on all your apps): security rules for Cursor and CLAUDE.md/AGENTS.md so your agent stops reintroducing the bugs, a Supabase RLS pack (read-only audit query + owner-only, team and storage policy templates), a 30-point pre-launch checklist, an "I leaked a key" runbook and 12 audit prompts.
Honest limits: it catches the common, embarrassing mistakes. It is not a penetration test.
Free scanner: https://preflight-kit.pages.dev
Kit, $14.98: https://buy.stripe.com/fZu4gt5u5dPwbBp3SGbII03
It's Hypership Day, so I'd love requests: what check is the scanner missing for your stack? Which false positive annoyed you? I'll try to ship the good ones today.