Fix the breaks scanners don't catch
Plain-English, step-by-step fixes for apps built with AI tools. Each one starts with the short answer.
Stripe paid, nothing unlocked
Why a customer can pay with Stripe and still be stuck on the free plan in an app built with Lovable, Bolt, v0 or Replit, and how to find and fix the broken step.
Read the guide →Login broke on my custom domain
Sign-up emails or login send people back to the preview link or localhost after you connect a custom domain. How to fix Supabase Site URL and Redirect URLs, Firebase authorized domains and hardcoded addresses.
Read the guide →What built-in scans miss
Built-in and free security scans check that keys aren't leaked and database rules are switched on. Here's what they can't see: rules that are on but wrong, payment and email setup, and whether customers can actually sign up and pay.
Read the guide →Check your live app in under a minute
AppFirstAid's free check looks at your live site from the outside: leaked keys, files left in public, safety settings, and whether your sign-up, login and checkout pages open. No signup. Journey tests that sign up, log in and try checkout like a real customer are coming soon (email us to hear when).
Run the free check