Free tools for AI-built apps
You built it with Lovable, Bolt, Cursor, v0, or Replit. It works, real people are using it, and now you want to know it is not leaking user data. These checks are the ones we run first in paid reviews, free and self-serve. No email, no gate.
Schema check, in-browser
Supabase RLS Policy Checker
Paste your schema, see which tables strangers can read. Runs entirely in your browser.
Eight checks against your Row Level Security setup, triaged into blocking, urgent, and can wait, with the corrected SQL for each. Your SQL never leaves the page: no upload, no signup, and you can watch the network tab to confirm.
Check my policies →Cost check, in-browser
Cursor Auto Cost Calculator
The price of a request is decided after you send it. See what that does to your month.
Since 24 August 2026 every Cursor Auto request bills at whatever model it got routed to, and the spread between routed models is roughly 8x. Slide in your requests per day and task mix, and see what Auto could be costing you versus pinning a model. Client-side only, nothing leaves the page.
Run my numbers →Cost check, in-browser
Swarm Run Cost Estimator
One agent is a line item. A swarm is a budget. Price yours in a minute.
One orchestrator fanning out to N sub-agents, a model per role, a retry rate, and runs per day. See the cost per run, per day, and per month, plus the spread between an all-cheap and all-expensive mix for the same shape, all derived from Anthropic API list prices verified against the official docs. Client-side only, nothing leaves the page.
Price my swarm →Ownership check, in-browser
Who Owns Your Code?
Sixteen questions across six dimensions, one A-F grade on how much of your app you actually control.
Code, data, deploy, domain, accounts, and knowledge: answer what you know about each and get a graded, triaged gap list plus a printable handoff demand list you can send a departing developer as-is. Answers live in the URL, nothing is sent to a server.
Grade my ownership →Live-app scan
Leak Check
Paste your live URL, get a launch-readiness read in about a minute.
This one probes the running app instead of the schema: reachability, SSL, auth flow, payment path, exposed keys in your client bundle, and open Supabase tables. Plain-English green, yellow, or red on each.
Scan my live app →More tools are on the way, roughly one a month, each one a check we already run by hand in paid work.
Found something you do not want to fix alone?
These tools catch the gaps a scan can catch. A Ship Check is the human version: a ranked report on your whole app, every finding with a proof you can re-run. And if you already know something is wrong, skip the queue and talk to us directly.