Written Review Report
Scope, evidence notes, prioritized actions and unknowns — within stated limits. Clear fix-before-launch vs ship-with-risk classification.
Validation Phase · Expert Review
Ship with confidence.
Not with exposed secrets.
ShipAudit helps founders shipping with Lovable, Bolt, Replit, Cursor and similar tools understand public configuration risk before launch. A scoped Founding Expert Review — not automated noise.
ShipAudit measures observable HTTP security hygiene within the stated scope. It is not a vulnerability scan, penetration test, compliance assessment, or security certification.
Automatic Scan
Safe-fetch engineering is in progress
Public scanning is intentionally disabled until SSRF, DNS rebinding, redirect, rate-limit and abuse-prevention gates pass.
90
Minutes of Expert Analysis
3
Business Day SLA
10
Founding Slots
0
False Promises
What You Receive
A scoped launch decision, not a wall of scanner noise.
Public-Surface Focus
Observable HTTP hygiene and configuration review. No exploit attempts, no authenticated sessions, no source code access required.
Human Judgment
False-positive removal, context-aware risk assessment, and clear recommendations — not raw scanner output.
Scope & Non-Goals
Honest boundaries for this validation phase
In Scope
- ✓ Public HTTP surface of one app / one primary domain
- ✓ Observable hygiene: HTTPS, headers, cookies, obvious public misconfig
- ✓ Customer-supplied read-only screenshots or architecture notes
- ✓ Prioritized actions and false-positive call-outs
Out of Scope
- ✗ Vulnerability exploitation, port scans, directory brute force
- ✗ Authenticated / login-session testing
- ✗ Full API or source-code audit
- ✗ Compliance certification (等保, GDPR "pass", etc.)
- ✗ ShipAudit-branded automated scanner (not shipped yet)
ShipAudit measures observable HTTP security hygiene within the stated scope. It is not a vulnerability scan, penetration test, compliance assessment, or security certification.
How It Works
Four steps to ship-ready clarity
01
Submit Details
Fill out the form with your app URL, stack, and concerns.
02
Pay & Confirm
Request the payment link by email while merchant checkout is being verified.
03
Expert Analysis
Up to 90 minutes of focused human review using public tools.
04
Get Report
Written report delivered within 3 business days.
Founding Offer
Founding Expert Review — $99
Limited to the first 10 paid orders. After payment and scope confirmation we deliver a written report within 3 business days.
- No passwords, cookies, or production secrets accepted
- We do not modify your code
- Extra scope is quoted separately — not squeezed into 90 minutes
Questions before paying? Email [email protected]