Preflight, by ShipClearance

Your AI-built app works.
Is it safe to ship?

Cursor, Bolt and Claude write code that runs — and quietly leaves API keys in the open, logins that don't check, queries that can be hijacked. Paste your code, get the problems in plain English, with the exact fix to paste back. Two minutes, free.

review — 214 lines pasted3 findings
highYour Stripe secret key is written directly in the code.
Anyone who views your page source can charge cards with it. Move it server-side; the fix below shows where. →

highThe /admin page never checks who is logged in.
Any visitor who types /admin gets in. Add the session check from the snippet. →

mediumSearch input goes straight into your database query.
A crafted search can read your whole users table. Use the parameterized version. →

Three steps. Nothing uploaded.

01

Paste your code

Straight from Cursor, Bolt, Lovable or your editor. No account, no install.

02

The review runs in your browser

Your code goes from your machine directly to the AI reviewing it — never to us. We couldn't store it if we wanted to: there's no server here.

03

Fix and ship

Every finding comes with the corrected code. Paste the fix back into your AI editor, re-check, ship.

The free version uses your own Claude API key (a review costs you about a cent, paid to Anthropic — not to us). If you'd rather not touch API keys at all, Preflight Pro includes reviews with no key setup — it's coming to the tool page shortly.

From the same bench: dev kits

Small, fully-typed TypeScript codebases we built for our own work with the Claude API. Buy once, own the code.

Claude API Kit 10 runnable examples — streaming, tool use, RAG, guaranteed JSON, caching €19
MCP Server Kit Build the MCP server Claude Desktop and Claude Code plug into €24
RAG Starter Kit RAG over your docs, with citations, without a vector database €29
Claude Agent Starter An autonomous agent: tools, memory, approval gates, web UI €39
All four — the Claude Dev Bundle Everything above, about 30% off €79
About

ShipClearance is a one-person studio. Preflight exists because the same story kept repeating: someone builds an app with an AI editor, ships it, and gets burned by a problem they couldn't have seen — a key left in the code, a login that never checked. The fix isn't "learn security"; it's a two-minute check before you ship.

— ShipClearance · contact@shipclearance.com