A pre-launch checklist for your codebase

Everyone has shipped something broken. A missing variable, debug output left on, an expired certificate, a leaked key. Preflight exists to catch that kind of mistake before your users do.

It’s one command that scans a project for launch readiness: secrets, security headers, SSL, SEO, broken configuration, and 72 commonly misconfigured services, across every major framework and CMS. It runs on your machine or in CI, reads your code only there, and never phones home.

Preflight is open source under the MIT license. The optional dashboard at app.preflight.sh adds a history of runs and AI fix suggestions, but the CLI stands on its own, with no account required.

Preflight was created and is maintained by Jon C. Phillips, a product designer and developer who has been launching web products for over twenty years. Ideas, feedback and requests for new checks are always welcome: write any time.