You built it with AI. Now ship it without leaking anything.
Free guides and a practical kit for the scary last mile: hosting, domains, API keys, databases and sign-in, explained for people who didn't come up as developers.
Works with Lovable, Bolt, Cursor and Replit, plus Supabase, Vercel and Stripe.
The app works in the preview. Going live is where it gets scary.
AI tools are brilliant at building features. They're far less reliable at the boring, high-stakes bits of launching, and those are the ones that cost real money when they go wrong.
- Keys in the browser. One wrong prefix and your Stripe or AI key ships to every visitor.
- An open database. A Supabase table without Row Level Security can be read and edited by anyone.
- Sign-in breaks on your domain. Confirmation emails still point at localhost or the preview URL.
- "Paid" unlocked by a URL. Visiting
/successshouldn't count as paying. - "I changed it and nothing happened." Env var changes need a redeploy, and nobody tells you.
The Ship It Kit by LaunchPad Kits
A tool-specific playbook for the last mile. It's not a scanner that hands you a list of problems. It's the prompts and click-by-click steps that actually fix them, written for the tools you already use.
Prompts that fix, not just flag
Each prompt makes your AI tool plan first, change only what's needed, and show its work.
Click-by-click deploy paths
Lovable to a custom domain, or Bolt and Cursor to Vercel, checked against the official docs.
A clear go / no-go
A full checklist and a one-page sheet, so you know when it's actually safe to share your link.
Everything in one download
Markdown and PDF. Read it in any editor, or paste straight into your AI tool.
- 3232 copy-paste prompts in 7 stagesPrep, secrets, auth, Supabase RLS, Stripe payments, performance and a final pre-launch review.
- 44 step-by-step deploy guidesLovable → custom domain · Bolt/Cursor → Vercel · Supabase setup + RLS · Env vars on Vercel.
- ☑Security checklist + one-page go/no-goAround 60 checks, plus a single sheet to tick off before you share your link.
- ⚙Drop-in AGENTS.md and Cursor rulesMakes your AI coder default to safer code: no secrets in the browser, RLS on every table, verified webhooks.
- ⎙A clean PDF of everythingAll guides and checklists in one file for reading offline or printing.
- ↻Free v1.x updatesPlatforms change their screens often. When the kit is updated, you get the new version.
One price. Yours to keep.
- 32 prompts, 4 deploy guides, checklists
- AGENTS.md + Cursor rules file
- Markdown + PDF, instant download
- Free updates to v1.x
- Use it on all your own projects
Secure checkout by Stripe. Not a professional security audit. See the FAQ for what the kit can and can't do.
Start with the free guides
Practical, checked against the official docs, and written for beginners.
How to Publish a Lovable App on Your Own Custom Domain
Step-by-step: publish a Lovable project, connect a domain you own (A and TXT records) or buy one in Lovable, fix sign-in on the new domain, and avoid the DNS mistakes that keep domains stuck on Verifying.
SecretsEnvironment Variables and API Keys, Explained for Vibe Coders
What .env files, VITE_ and NEXT_PUBLIC_ prefixes, and secret vs publishable keys actually mean, and where to put keys in Lovable, Bolt, Replit and Vercel so they never leak to the browser.
SupabaseSupabase Row Level Security (RLS) for Beginners
Why your Supabase data is public until you turn on RLS, how grants and policies work together, and copy-paste SQL for the two patterns most AI-built apps need: 'users see only their own rows' and 'anyone can read'.
Questions, answered honestly
I don't know how to code. Can I still use this?
Yes. Most of the kit is copy-paste prompts you give your AI tool, plus click-by-click guides for the Lovable, Vercel and Supabase dashboards. Where a command line is involved, it’s optional and the exact commands are included.
Which tools does it cover?
Lovable, Bolt, Cursor and Replit for building, Supabase for the database and sign-in, Vercel or Lovable hosting for deployment, and Stripe for payments. The prompts and rules file work with any AI coding tool that accepts instructions.
Does this guarantee my app is secure?
No kit can guarantee that. It walks you through fixes for the most common, highest-impact problems in AI-built apps (exposed keys, missing RLS, broken auth redirects, unverified payments) and gives you a checklist to confirm them. For apps handling sensitive or regulated data, get a professional review as well.
How is this different from your free guides?
The free guides explain the concepts and the main steps. The kit adds 32 prompts that make your AI tool do the fixes, deeper guides, a full security checklist, a one-page go/no-go sheet and a drop-in rules file for your AI coder, all in one download.
What format is it, and how do I get it?
A download with Markdown files and a PDF. Right after checkout we email you a private download link (valid 72 hours, and you can request a fresh one any time), and you get free updates to v1.x.
Can I get a refund?
Yes. If the kit isn’t useful to you, email us within 14 days of purchase for a full refund, no questions asked. The download link is switched off once the refund is issued.
Is it a subscription?
No. It’s a one-time payment of $19.
What if a platform changes its buttons?
They do, often. Every guide links to the official docs it was checked against (October 2026), so if a label has moved the linked doc is the source of truth. Updates to the kit are free.