LaunchPal

Audit a site built with AI tools and get plain-English fixes.

LaunchPal audits a website you built with an AI tool and tells you what to fix before you launch. Open the page, click the icon, and you get a score, a severity-ranked list, and one paste-ready prompt per issue, written in the format Cursor, Claude Code and Lovable understand. WHAT IT FINDS Leaked secrets: API keys, service credentials and high-entropy tokens found in inline scripts and bundles. Values are masked in the report so a key is never rendered in full. Forms that do not work: placeholder endpoints, missing validation, no spam protection, no success or error message, so messages are lost silently. Security headers: HTTPS, HSTS, content security policy and how easy it is to bypass, framing protection, mixed content. Exposed files on sites you have proven you own: .env variants, .git/config, .git/HEAD, .DS_Store, backup and dump files, .sqlite databases. Open backends on verified sites: unauthenticated Firebase Realtime Database, wildcard CORS, API routes that answer without a login. Launch basics and SEO: title, meta description, social preview tags, favicon, leftover placeholder text, a single H1, canonical, accidental noindex, robots.txt, sitemap, structured data. Mobile and accessibility: viewport, tap target sizes, alt text, heading order, real contrast ratios. Console and links: errors thrown while loading, failed resources, internal links that answer 404. WHAT IT DOES NOT DO It is not a penetration test. It does not send attack traffic, does not test for SQL injection or remote code execution, and does not scan sites you have not opened and chosen. Free scans read the page you are on. Deeper scans only run on an origin you verify by publishing a token. PRIVACY Secrets are matched locally in your browser and masked before display. Page content, findings and URLs are never uploaded. The only network calls are to the licence service, to activate or validate a key. PRICING Free: full scan and score, 3 fix prompts per scan, no account. 30-day pass: KES 500 one time. Everything unlocked, no renewal. Pro: KES 1,500 per month, or KES 12,000 per year. Payments are processed by Paystack in Kenyan shillings by card, M-Pesa, Airtel Money or bank transfer. Refunds within 14 days.