Original Summary

I've been building apps with Lovable, Cursor and Claude Code, and kept running into the same worry: the app works , but I had no idea whether the database was quietly readable by anyone. So I built Shippable . You paste your app's link, prove it's yours (your AI tool adds one line for you), and it checks your live app from the outside, read-only, without changing anything. Video above is the 50-second version. On my deliberately leaky test app it found 14 problems, including anyone being able to read customer emails, download support tickets, and issue refunds through the payment account. A few things I cared about: Proof. Every finding shows the actual request and response, so you can see it's real and not a scary-sounding maybe. Fixes written for your AI tool. Each problem comes with a prompt you paste into Lovable/Cursor/Claude, then you re-check. Owners only. You can only scan apps you've verified, so it can't be pointed at someone else's site. Also works from your editor. There's a CLI and an MCP server, so your coding agent can check its own work. I also ran the code checks over 295 public Lovable repos: 51% shipped at least one issue, 20% a critical one. The most common was a committed .env file. Write-up: shippable.dev/leaks/state-of-lovable Your first app is free. After that it's $1/app/month, with unlimited scans and daily monitoring included. I'd love feedback, especially if it flags something you think is wrong. There's a "This looks wrong?" button on every finding and I read all of them. 👉 shippable.dev   submitted by   /u/R_Egarter [link]   [comments]

  • 情报分类：商业与市场研究
  • 分类依据：内容涉及商业、投资或市场动态
  • 信息来源：Reddit · SideProject
  • 发布时间：2026/10/18 02:39:17