Flag P: all aboard, the vessel is about to proceed to sea.
Free and open source · MIT · Runs on your machine
SIGSHIP reads your AI-built app on your own machine and lists what will break in production. It exits 0 only when it finds nothing serious, which gives your coding agent a real test for done.
How it works
$ npx sigship
SIGSHIP read 6 files in 22 ms, ran 17 checks
Postmortem, written before the outage. Worst first.
SEV-1 Your Stripe webhook accepts anything
src/api/stripe-webhook.ts:3 Handles Stripe events with no signature check in this file.
Someone posts a fake "payment succeeded" event to your endpoint and
gets your paid plan for free.
SEV-1 A database table has no row level security
supabase/migrations/001_init.sql:1 Table profiles is created without row level security.
Anyone with your public Supabase key can read this table. That key
ships in your JavaScript.
SEV-2 Your AI route has no spending brake
src/api/chat.ts:2 This route calls a paid AI API and the project has no rate limiter.
One script loops on this endpoint overnight and you wake up to the
invoice.
NO-GO 3 SEV-1, 1 SEV-2, 3 SEV-3. Exit 1.
Paste the fixes into your AI tool: npx sigship --prompt$ npx sigship
SIGSHIP read 6 files in 32 ms, ran 17 checks
GO 0 SEV-1, 0 SEV-2, 0 SEV-3. Exit 0.
This means these checks found nothing that blocks launch. It does not prove the app is safe.In harbourFlag P: the vessel is about to sail.
SIGTERMIn UnixA signal a program has to act on.
Ready to leave port, or not yet.
In harbour, flag P, the Blue Peter, tells everyone the vessel is about to sail. In Unix, a signal tells a running program something it has to act on. SIGSHIP is both: one clear message that this app is ready to leave port, or that it isn’t yet.
Check any project, then paste the fixes into Lovable, Cursor, Bolt or Claude Code as one prompt.
npx sigship --promptPrefer buttons to a terminal? Open a dashboard with the verdict, every finding and the fix prompt. It runs on your computer and uploads nothing.
npx sigship uiAdd a GitHub check that fails when a change brings a serious problem back.
npx sigship initGive your agent the check over MCP, with one instruction: don’t say it’s done while the verdict is NO-GO.
claude mcp add sigship -- npx -y sigship mcpBlocks launch. Exposes data or money.
Blocks launch. Abuse is easy.
Reported. Blocks only with --strict.
Coming soon
For people who build with AI tools and don't live in a terminal. Connect your project, and SIGSHIP checks every change, watches your live site and tells you what to fix in plain English.
Sign in with GitHub and pick a repo. Projects from AI builders connect through their GitHub sync, and projects from AI editors through the repo you push to.
SIGSHIP checks your code on every push and every night. It also probes your live site and your Supabase from the outside, the way an attacker would.
Each problem comes in plain English with a fix prompt ready for the tool you build with. Fix it, and SIGSHIP checks again on its own.
Planned to work with projects built in
The free tool stays fully on your machine. In Cloud, your code is read in an isolated runner and deleted within minutes. Only the findings are kept.
Pricing
Free is open source and available today. Paid plans open soon. Not sure which kind you need? Self-hosted and Cloud, explained.
Runs on your machine and in your own GitHub. Your code never leaves.
The open source check for every AI-built app.
$0 forever
No signup. No limits.
What you get today
Every check we have, on your own machine and CI.
$149 one-time
Includes 1 year of new checks. Keep it forever.
Everything in Free, plus
Planned features. They arrive at launch.
For studios and agencies shipping client apps.
$499 one-time
Includes 1 year of new checks. Keep it forever.
Everything in Pro, plus
Planned features. They arrive at launch.
We run it for you. Connect a repo, and SIGSHIP keeps watch on your code and your live site.
For a founder with an app in production.
$19 a month
Billed monthly. Cancel anytime.
All Pro checks, plus
Planned features. They arrive at launch.
For small teams shipping every week.
$59 a month
Billed monthly. Cancel anytime.
Everything in Solo, plus
Planned features. They arrive at launch.
For agencies running many client apps.
$149 a month
Billed monthly. Cancel anytime.
Everything in Team, plus
Planned features. They arrive at launch.
| Self-hosted | Cloud | |||||
|---|---|---|---|---|---|---|
| Feature | Free$0 | Pro$149 once | Business$499 once | Solo$19/mo | Team$59/mo | Agency$149/mo |
| Plan | ||||||
| Repos or projectsHow many codebases the plan covers. | Unlimited | 5 | 25 | 3 | 10 | 30 |
| Team membersWho can use it. Self-hosted plans have no seat limit. | Unlimited | Unlimited | Unlimited | 1 | 5 | 15 |
| New checks and updatesSelf-hosted paid plans include a year of new checks. You keep what you have after that. | Always | 1 year | 1 year | Always | Always | Always |
| Checks | ||||||
| 17 core checksLeaked keys, committed .env files, open Supabase tables, unverified Stripe webhooks, AI routes with no spending brake and more. | Included | Included | Included | Included | Included | Included |
| Pro packOpen Firebase rules, public storage buckets, routes that change data with no auth, Razorpay webhooks, upload limits, open redirects and weak session cookies. | Not included | Included | Included | Included | Included | Included |
| Deep Supabase policy checkFinds policies that exist but do not restrict anything, the service key used in the browser, and email confirmation turned off. | Not included | Included | Included | Included | Included | Included |
| Security headersContent security policy, clickjacking protection and HSTS in your Next.js, Vercel or Netlify config. | Not included | Included | Included | Included | Included | Included |
| Login and signup rate limitsCatches auth endpoints anyone can hammer with guesses. | Not included | Included | Included | Included | Included | Included |
| Hallucinated and look-alike packagesAI tools sometimes invent package names, and attackers register them. SIGSHIP flags packages that look wrong. | Not included | Included | Included | Included | Included | Included |
| Known vulnerable packagesChecks your dependencies against public security advisories. | Not included | Included | Included | Included | Included | Included |
| Secrets in git historyFinds keys that were committed once and deleted later. They are still in your history. | Not included | Included | Included | Included | Included | Included |
| AI app checksUser input pasted into system prompts, and AI output rendered as raw HTML. | Not included | Included | Included | Included | Included | Included |
| More payment webhooksPaddle, Lemon Squeezy and Polar, as well as Stripe and Razorpay. | Not included | Included | Included | Included | Included | Included |
| Fix | ||||||
| Fix prompt for any AI toolEvery finding as one prompt you can paste into your AI tool. | Included | Included | Included | Included | Included | Included |
| Prompts tuned for your toolFix prompts written for Lovable, Cursor, Bolt, Claude Code and Replit. | Not included | Included | Included | Included | Included | Included |
| One-click fix pull requestsSIGSHIP opens a pull request with the fix for simple problems. | Not included | Not included | Not included | Not included | Included | Included |
| Automatic re-check after a fixPush a fix, and SIGSHIP checks again on its own. | Not included | Not included | Not included | Included | Included | Included |
| Where it runs | ||||||
| Terminal, browser dashboard and MCPRun it yourself, click through results in your browser, or give it to your coding agent. | Included | Included | Included | Included | Included | Included |
| Pull request checkA GitHub check that fails when a change brings a serious problem back. | Included | Included | Included | Included | Included | Included |
| Pre-commit hookStops a secret before it is ever committed. | Not included | Included | Included | Not included | Not included | Not included |
| GitHub code scanningFindings appear in the Security tab of your GitHub repo. | Not included | Included | Included | Included | Included | Included |
| Pull request comments and nightly checksResults posted on each pull request, and a check every night. | Not included | Included | Included | Included | Included | Included |
| Connect from AI buildersConnect projects from GitHub, Lovable, Bolt, Replit and v0. Nothing to install. | Not included | Not included | Not included | Included | Included | Included |
| Watch | ||||||
| Live site scanChecks your deployed site from the outside: exposed .env or .git, source maps, missing headers and open admin pages. | Not included | Not included | Not included | 1 site, daily | 10 sites, hourly | 30 sites, hourly |
| Live Supabase probeTries your public key the way an attacker would and reports which tables it can read. | Not included | Not included | Not included | Included | Included | Included |
| SSL, domain and downtime alertsWarns you before a certificate or domain expires, and when the site goes down. | Not included | Not included | Not included | Included | Included | Included |
| New vulnerability alertsTells you when a package you use gets a new security advisory. | Not included | Not included | Not included | Included | Included | Included |
| Reports | ||||||
| Terminal, JSON and Markdown outputFor people, scripts and pull request comments. | Included | Included | Included | Included | Included | Included |
| Client-ready reportA clean HTML report to send to a client or investor. | Not included | Included | Included | Included | Included | Included |
| Pre-launch checklist PDFA one-page checklist showing what was checked before launch. | Not included | Included | Included | Included | Included | Included |
| White-label reportsYour logo and name on client reports. | Not included | Not included | Included | Not included | Not included | Included |
| Launch readiness score and historyA score from 0 to 100, and a graph of your app getting safer. | Not included | Not included | Not included | Included | Included | Included |
| "Checked by SIGSHIP" badgeA badge for your site showing the latest verdict. It never claims your app is certified. | Not included | Not included | Not included | Included | Included | Included |
| Team and control | ||||||
| Accepted risks fileMark a finding as known, with a reason and an expiry date, so it stops blocking. | Not included | Included | Included | Included | Included | Included |
| AlertsWhere SIGSHIP tells you when something turns NO-GO. | Not included | Slack, Discord, email | Slack, Discord, email | Slack, Discord, email | All, plus a channel per client | |
| Roles and activity logWho can do what, and a record of what changed. | Not included | Not included | Not included | Not included | Included | Included |
| Single sign-onSign in with your company identity provider. | Not included | Not included | Not included | Not included | Not included | Included |
| Support | ||||||
| SupportHow to reach us. | Community | Priority | Priority | Onboarding call | ||
Free is available now. Everything in paid plans is planned and arrives at launch.
A senior zoof04 engineer reads your repo by hand and sends a ranked, written review within 48 hours, with a 30-minute call. Available now.
From $499
Request a pilot reviewSelf-hosted or Cloud?
It runs on your computer and in your own GitHub. Your code never leaves your machines. You start it with one command.
Best if you use a terminal or GitHub and want full control.
We run it for you. Connect a repo, and SIGSHIP checks every change and watches your live site. Nothing to install.
Best if you build in Lovable, Bolt or Replit, or want us to keep watch.
| Self-hosted | Cloud | |
|---|---|---|
| Who runs it | You, on your machine and CI | We do |
| Where your code goes | Nowhere. It stays with you. | Read in an isolated runner, deleted within minutes |
| Setup | One command | One click |
| Watches your live site | No | Yes |
| How you pay | Free, or once for Pro and Business | Monthly |
| Available | Free today. Pro and Business soon. | Soon. Join the waitlist. |
Questions
Yes. It is open source under the MIT license, needs no signup, has no repo limit and runs on your machine for as long as you like.
Not with self-hosted. It runs on your machine and sends nothing. With a licence key it sends only the key and a one-way repo fingerprint. Cloud will read your code in an isolated runner, delete it within minutes, and keep only the findings.
You pay once and use it for as long as you like. The price includes a year of new checks. After that you can renew to keep getting new checks, or keep the last version you downloaded, forever.
Yes. Cloud plans include every Pro check, so you can start self-hosted and move to Cloud when you want SIGSHIP to keep watch for you.
For self-hosted, you only need to paste one command into a terminal. For Cloud, you don't need to code at all: connect your project and read the results in plain English.
Soon. Join the waitlist and we will email you once, when your plan opens, with launch pricing.
Ask within 14 days of your first payment and we will refund it in full.
Waitlist
Pro, Business and Cloud are on the way. We will email you once, when your plan opens, with launch pricing. Nothing else. Ask us at support@sigship.dev to remove you at any time.