This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
PreFlight Kit
Catch leaked keys and open Supabase tables before launch
A free local scanner for vibe-coded apps that finds leaked API keys, Supabase tables without RLS and secrets in git history, then writes a fix prompt for your agent. The $14.98 kit adds agent rules, an RLS pack, a launch checklist and a leaked-key runbook.
Hi Product Hunt, I'm Isaac, the maker of PreFlight Kit.
AI coding agents are great at "make it work" and bad at "make sure nobody else can". The same holes keep showing up in vibe-coded apps: service_role keys in the frontend, Supabase tables with RLS off, secrets sitting in git history, admin checks that only hide a button.
PreFlight is my attempt at a 10-minute check before you launch:
🔎 Free scanner: one file (preflight.mjs), zero dependencies, Node 18+. It runs on your machine and nothing is uploaded. You get a score and a PREFLIGHT-REPORT.md with a fix prompt to paste into Cursor, Claude Code, Codex, Lovable or Bolt. It exits non-zero on criticals, so it works in CI.
🧰 The $14.98 kit (one-time, use it on all your apps): security rules for Cursor and CLAUDE.md/AGENTS.md so your agent stops reintroducing the bugs, a Supabase RLS pack (read-only audit query + owner-only, team and storage policy templates), a 30-point pre-launch checklist, an "I leaked a key" runbook and 12 audit prompts.
Honest limits: it catches the common, embarrassing mistakes. It is not a penetration test.
It's Hypership Day, so I'd love requests: what check is the scanner missing for your stack? Which false positive annoyed you? I'll try to ship the good ones today.
No comment highlights available yet. Please check back later!
About PreFlight Kit on Product Hunt
“Catch leaked keys and open Supabase tables before launch”
PreFlight Kit was submitted on Product Hunt and earned 0 upvotes and 1 comments, placing #310 on the daily leaderboard. A free local scanner for vibe-coded apps that finds leaked API keys, Supabase tables without RLS and secrets in git history, then writes a fix prompt for your agent. The $14.98 kit adds agent rules, an RLS pack, a launch checklist and a leaked-key runbook.
PreFlight Kit was featured in Developer Tools (522.6k followers), Security (3k followers) and Vibe coding (747 followers) on Product Hunt. Together, these topics include over 100.6k products, making this a competitive space to launch in.
Who hunted PreFlight Kit?
PreFlight Kit was hunted by PreFlight Kit. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how PreFlight Kit stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
PreFlight Kit
Hi Product Hunt, I'm Isaac, the maker of PreFlight Kit.
AI coding agents are great at "make it work" and bad at "make sure nobody else can". The same holes keep showing up in vibe-coded apps: service_role keys in the frontend, Supabase tables with RLS off, secrets sitting in git history, admin checks that only hide a button.
PreFlight is my attempt at a 10-minute check before you launch:
🔎 Free scanner: one file (preflight.mjs), zero dependencies, Node 18+. It runs on your machine and nothing is uploaded. You get a score and a PREFLIGHT-REPORT.md with a fix prompt to paste into Cursor, Claude Code, Codex, Lovable or Bolt. It exits non-zero on criticals, so it works in CI.
🧰 The $14.98 kit (one-time, use it on all your apps): security rules for Cursor and CLAUDE.md/AGENTS.md so your agent stops reintroducing the bugs, a Supabase RLS pack (read-only audit query + owner-only, team and storage policy templates), a 30-point pre-launch checklist, an "I leaked a key" runbook and 12 audit prompts.
Honest limits: it catches the common, embarrassing mistakes. It is not a penetration test.
Free scanner: https://preflight-kit.pages.dev
Kit, $14.98: https://buy.stripe.com/fZu4gt5u5dPwbBp3SGbII03
It's Hypership Day, so I'd love requests: what check is the scanner missing for your stack? Which false positive annoyed you? I'll try to ship the good ones today.