PreflightX

Gallery

About

I’ve spent the last few weeks researching how secure AI-built apps actually are once they hit production. So I took 100 publicly launched apps built with Lovable, Bolt, Cursor and similar tools (Product Hunt launches, showcase pages, “I built X” posts) and ran passive, read-only checks. I only looked at what any visitor’s browser already downloads: no logins, no attacks, no touching anyone’s data. I’m not naming any apps. What I found: 37/100 had at least one potentially exposed secret in their...