Stop embarrassing yourself in production.
Scan your codebase for launch readiness before you ship. Preflight catches leaked secrets, broken configs, expired SSL, missing SEO tags, security gaps, and 70+ misconfigured services. Just run the command.
Then initialize in your project:
cd your-project
preflight init
preflight scan
$ cd my-awesome-app
$ preflight scan
✈ Preflight Scan Results
Project: my-app
📋 ENV Environment variables are in sync ✓ OK
💓 HEALTH Health endpoint is reachable ✓ OK
💳 PAYMENTS Stripe webhook configured ✓ OK
🐛 ERRORS Sentry DSN configured ✓ OK
🔒 SECURITY Security headers are present ✗ FAIL
└─ Missing: Content-Security-Policy
🔐 SSL SSL certificate is valid ✓ OK
🔍 SEO SEO metadata is complete ✓ OK
📄 FILES robots.txt is present ✓ OK
🎨 ICONS Favicon and app icons present ⚠ WARN
└─ Missing: apple-touch-icon
✓ Passed: 7 ⚠ Warnings: 1 ✗ Failed: 1
✗ Not ready for launch
Why use this?
Because you've shipped broken stuff before. We all have. Forgot to set an env var. Left debug mode on. Pushed with an expired SSL cert. Deployed on a Friday and ruined your weekend. Preflight is just a sanity check.
Run it before you deploy and catch the dumb stuff before your users do. Better yet, add it to your CI pipeline or GitHub Action and never think about it again. No account needed, no config files to maintain, no dashboard to check. Just a command that tells you if you're good to go or not.
It's the "did I leave the stove on?" check for your codebase.
What it checks
- ✓ Environment variable parity
- ✓ Health endpoint reachability
- ✓ SSL certificate validity
- ✓ Security headers (HSTS, CSP)
- ✓ Leaked secrets and API keys
- ✓ Debug statements left in code
- ✓ Dependency vulnerabilities
- ✓ SEO metadata
- ✓ Canonical URLs
- ✓ Open Graph and Twitter Cards
- ✓ Structured data (JSON-LD)
- ✓ Favicon and apple-touch-icon
- ✓ Web manifest
- ✓ robots.txt and sitemap.xml
- ✓ llms.txt for AI crawlers
- ✓ Custom 404/500 error pages
- ✓ Large image detection
- ✓ WWW redirect configuration
- ✓ Viewport and lang attributes
- ✓ SPF/DMARC email auth
- ✓ Cookie consent (GDPR/CCPA)
- ✓ And more...