Tools we review
Built it with AI? We review it.
A senior analyst checks apps built with any of these tools, and the services they run on. Whatever you used, we look at the same things: your data, your keys, sign-in, payments, costs and what happens when it breaks.
Ask for a free checkSee what we check
Build it for me
What we check: Database rules, keys in the front end, sign-in and payments: the usual gaps when an app is generated from prompts.
- Lovable ↗Prompt-to-app builder.
- Bolt ↗Prompt-to-app builder that runs in the browser.
- Replit ↗Prompt-to-app and mobile builder, with hosting.
- v0 ↗Vercel’s prompt-to-app and UI builder.
- Base44 ↗Prompt-to-app builder.
- Bubble ↗No-code web app builder.
- FlutterFlow ↗Visual builder for mobile and web apps.
- Glide ↗No-code apps from your data.
- Framer ↗Website builder with AI.
- Webflow ↗Visual website builder.
Code it with AI
What we check: Code your agent wrote that nobody has read: leftovers, packages it invented, and changes that undo earlier fixes.
- Cursor ↗AI-first code editor with coding agents.
- Claude Code ↗Anthropic’s coding agent.
- Windsurf ↗AI code editor with an agent.
- Cline ↗Open-source coding agent in your editor.
- GitHub Copilot ↗AI pair programmer and agent from GitHub.
- OpenAI Codex ↗OpenAI’s coding agent.
- JetBrains AI ↗AI assistant and agent in JetBrains IDEs.
- CodeRabbit ↗AI code review on every pull request.
Design it
What we check: What the generated front end exposes, and how it looks against Lookalike Check’s 41 patterns.
Automate it
What we check: Workflows that touch customer data, the keys they hold, and the webhooks that start them.
Run it
What we check: How each service is set up: row-level security, webhook signatures, keys, spending limits and backups.
- Supabase ↗Database, sign-in and storage.
- Firebase ↗Google’s database, sign-in and hosting.
- Stripe ↗Payments and billing.
- Vercel ↗Hosting and deployment for web apps.
- Netlify ↗Hosting and deployment for web apps.
- Render ↗Hosting for apps, databases and jobs.
- Railway ↗Hosting for apps and databases.
- Google Cloud ↗Google’s cloud platform.
- AWS ↗Amazon’s cloud platform.
The models your app calls
What we check: Prompt injection, what the AI can reach, and hard caps on what it can spend.
Don’t see your tool? Ask anyway: the checks are about how your app is set up, not which tool wrote it. Names and logos belong to their owners and are shown to say which tools’ apps we review, not as a partnership; each card links to the tool’s own website.