Menu

Checklists

Checklists

Short enough to run before you send someone the link. Each one links to the longer guide when a step needs more than a checkbox.

Already deployed? Run the public URL through the Live App Scanner first, then use the checklist to fix what it finds.

  1. 01ChecklistShip checklist for a vibe-coded appThe ordered checks to run before you share the URL of an app built with Lovable, Bolt, Cursor, Supabase, or Firebase, from leaked keys to payments.
  2. 02ChecklistLovable and Bolt pre-launch security checklistA pre-launch security pass for Lovable, Bolt, v0, Cursor, and Replit apps: exposed keys, database rules, auth, storage, and payments before you share the URL.
  3. 03ChecklistFirebase security rules checklistReplace test mode, stop open Firebase security rules, and check ownership, queries, and custom claims before you ship Firestore.
  4. 04ChecklistSupabase RLS security checklistEnable RLS, fix table grants, write one policy per operation, and test as the anon role before you ship a Supabase app built with Lovable, Bolt, or Cursor.