Free Checklist

Before you launch your AI-built app, check these production risks.

8 categories. ~40 checks. Designed for apps built with Lovable, Replit, Bolt, Bubble, Cursor, or Claude. One hour, one sitting — mark each item green, yellow, or red. Preview the first two checks of every category below; drop your email to unlock the rest.

How to use this checklist

Sit down with it for one hour. Mark each item green (verified working), yellow (exists but not sure), or red (doesn't exist or I don't know).

More than three reds anywhere below and your launch date should probably move — or you should get help.

1. Deployment

Deploy is repeatable — anyone on the team can ship the same build twice and get the same result.
Production is separate from development — different DB, different API keys, different environment.

2. Auth and authorization

Auth is enforced server-side, not just in the UI.
Tested as a second user — log in as a different account, try to access the first user's data.

3. Secrets

All API keys are in environment variables or a secret manager.
No keys in the frontend bundle — inspect the built JS to be sure.

4. Database

Backups exist — automatic, daily at minimum.
Backup restore has been tested — a backup you've never restored is not a backup.

5. Payments and webhooks

Stripe / payment webhooks verified with the signing secret.
Webhook handler is idempotent — retries don't charge twice.

6. Observability

Logs are centralized — not just a `console.log` hiding in a dashboard tab.
Errors are grouped and searchable (Sentry, Axiom, Datadog, or equivalent).

7. Cost and scaling

You can estimate your monthly production bill within 30%.
You know your cost per active user — roughly.

8. Incident response

Someone is on-call, even if that someone is you.
A "production is on fire" runbook exists — single page, ordered steps.

Unlock the full 40-item checklist

Drop your email and the rest of every category unlocks instantly on this page. We'll also send the PDF by email.

Scoring

0–3 reds — decent shape. Fix the reds, launch, watch observability.
4–8 reds — real production gap. A 1–2 week sprint will save you a bad launch.
9+ reds — don't launch to real users in this state. Get help.

Learn about Vibe-to-Production