Free
$0
1 checkup when you create an account.
- Preview grade without an account
- Full details after you verify the domain
- Purchased credits are not included
For people who shipped with an AI coding tool
Find the key your AI coding tool left in the live app.
ShipCheck opens the live app in a real browser, diffs it against the last checkup, and tells you what changed in plain English. Then it can roast the result, hand the fix to Cursor or Lovable, and time how long a leaked key has been public.
Not the same scanner with a new coat of paint
A real browser, not just a fetch
Playwright loads the page, clicks the main nav, and keeps the console errors, failed requests, and a full-page screenshot.
Vibe Diff
Each checkup is compared with the last one. You get a before, an after, a red pixel diff, and a sentence about what the deploy changed.
Roast mode
An optional card you can post. Funny, accurate, and free of key names, file paths, and table names. The serious report stays the default.
A fix pack for the tool you used
Cursor, Claude Code, Lovable, Bolt, Replit, or v0. ShipCheck guesses from the page when it can, then downloads prompts plus an AGENTS.md or .cursorrules file.
Leak timer
When a secret shows up, you see how long it has likely been public, a rough risk meter, and the provider’s key-rotation page.
Launch-day meter and the Wall of Shipped
OG tags, favicon, 404, viewport, robots, sitemap, legal pages, broken links, and a lightweight speed check. Grade A apps can opt into a public wall.
How a checkup goes
1. Preview
Paste the live URL. You get a grade and the categories. No exploit attempts, no brute force.
2. Prove it’s yours
Add a DNS TXT record, a meta tag, or a file. Then a full checkup can name the key and the table.
3. Spend a credit
The first full checkup on a new account is free. After that, buy singles, a pack, or a monthly allowance. Weekly scans and deploy hooks spend one credit each.
Checkups, not seats
1 checkup = 1 full scan of one app. Monthly credits reset. Purchased credits stay.
Pay as you go
$12.99
Per checkup. Never expires.
- One full scan of one app
- Use it whenever you want
- No monthly reset
Starter
$9.99/mo
5 checkups a month · $2.00 each if you use them all
- Enough for one app on a weekly schedule.
- Weekly scans and deploy hooks spend 1 credit each
- Unused monthly credits reset, they do not roll over
- Subscriber price on extra credit packs
Pro
$39.99/mo
15 checkups a month · $2.67 each if you use them all
- Enough for about three apps checked every week.
- Weekly scans and deploy hooks spend 1 credit each
- Unused monthly credits reset, they do not roll over
- Subscriber price on extra credit packs
Extra credits
Packs cost less per checkup than the $12.99 single price. Subscribers pay less again. A subscription is still the better deal if you scan every week (Starter is about $2.00 a checkup).
5 checkup pack
$49.95
$9.99 each · subscribers pay $34.95
A small buffer for deploy-day rescans. These credits never expire.
10 checkup pack
$89.90
$8.99 each · subscribers pay $59.90
Extra credits when a launch week runs hot. These credits never expire.
Against a typical URL scanner
| ShipCheck | A typical URL scanner | |
|---|---|---|
| Sees client-side console errors | Yes, with a real browser | Usually no |
| Compares this deploy to the last one | Screenshot diff and a sentence | A new PDF each time |
| Names the table only after you prove the domain | Yes | Often shows everything to anyone |
| Hands the fix to the tool that built the app | Cursor, Claude, Lovable, Bolt, Replit, v0 | A generic writeup |
| Priced per checkup | 1 credit = 1 scan | Often a seat or a vague plan |
No vendor names. Read exactly what we check and never do.
Notes from builders
Placeholders. Not real quotes.
“I shipped on a Friday and found the service role key on Monday.”
“The diff told me the pricing page got slower after the last prompt.”
“I pasted the fix pack into the same tool that built the app.”