Question 1

How long does a check take?

Accepted Answer

Usually 5 to 15 minutes. Every page is opened in a real phone browser and the deep security scan (OWASP ZAP and Nuclei) runs against the site, which is where most of the time goes.

Question 2

My AI tool already has a security scan. Why do I need this?

Accepted Answer

Keep it. Your builder's scan (Lovable, Base44, Bolt, Replit) or your AI tool's code review checks your project from the inside: the code, the database rules and the packages. LaunchProof checks the site that is actually live, from the outside, the way a stranger would: what your database really returns, files your deploy shipped by accident, your email DNS, your certificate and headers as served, and every script a visitor downloads. They catch different things, so run both.

Question 3

Could this break or slow down my site?

Accepted Answer

The checks only read what a visitor's browser already downloads, plus public DNS and public configuration, so they are the same traffic as one careful visitor. The deep scan sends real test input, so only run it on a site you own or have permission to test.

Question 4

What do I get for free, and what is in the full report?

Accepted Answer

The free check gives you the score, the verdict, how many Critical, Important and Minor issues there are, and the single most serious finding in plain English. The full report is every finding with the evidence and the fix, plus the deep scan results, the plan, the investor scorecard and the cost forecast.

Question 5

Which builders and hosts does it work with?

Accepted Answer

Any public website. It recognises Lovable, Bolt, v0, Replit, Cursor and hand-written apps on Vercel, Netlify, Cloudflare, Render and Railway, with Supabase or Firebase behind them, and tailors the fix instructions to what it finds.

Question 6

Do you keep a copy of my site or my data?

Accepted Answer

No. The report keeps the finding records, with anything sensitive redacted to a prefix, and phone screenshots of up to four pages. When your database answers a request it should not, we record the row count and column names, never the values.

Question 7

Is this the same LaunchProof as launchproof.org?

Accepted Answer

No. This LaunchProof, at trylaunchproof.com, is the security and launch-readiness scan for AI-built apps. It is not affiliated with launchproof.org or any other product that uses the name.

Find out what your AI-built site leaks before your customers do.

Why it matters

What LaunchProof checks

Common questions