WHITE HATS. BLACK FLAGS. SAVE YOUR BOOTY.
You built it. You shipped it. Now find out what you missed. SHIPWREKT checks the security, visibility and operational habits behind fast-moving websites and vibe-coded apps.
Live assessment tools
Run a free website security and search-visibility check. Want to go deeper? Connect an authorized GitHub repository to inspect deployment habits and operational safeguards.
Review GitHub deployment patterns and security safeguards. Public repositories need no token; private repositories require a fine-grained read-only token. This introductory review is currently free.
What your launch checklist missed
A website can look finished, load quickly and take payments while still carrying expensive surprises. SHIPWREKT looks beyond the polished front end to assess how your application protects information, handles access, holds up under change and presents itself to search engines and AI assistants.
Misconfigured access, exposed services and overlooked weaknesses can turn a routine release into a serious incident. We assess the risks that matter to your application and explain their business impact.
Search engines and AI assistants need to understand what you offer and why your information is trustworthy. We identify obstacles that make your business harder to discover, interpret or recommend.
Permissions drift, changes go undocumented and small gaps compound as teams grow. We look for warning signs that your processes may be leaving the door open.
You'll know what needs attention, why it matters and what deserves priority, backed by evidence you can act on. When fixes are completed, we can verify them against the original findings.
See assessment options →Choose your level of protection
Transparent starting prices in USD. We confirm scope before any paid work. Testing requires authorization and stays within agreed boundaries.
Teal • ReconA first look at your public-facing website. No AI queries or API charges.
Orange • Automated assessmentEvidence-backed automated checks for your deployed application, with optional AI-assisted visibility analysis.
Red • Human-led reviewFor teams ready to understand and address the real risks.
Prices are starting rates, subject to confirmed scope and availability. Findings and depth depend on access and the systems assessed. Remediation work, ongoing monitoring and retesting are quoted separately.
Questions
No. AI-assisted and vibe-coded products are a focus, but the same security fundamentals apply to traditionally built software.
No passwords by email. We agree on safe, least-privilege access or temporary test accounts when authenticated assessment is required.
No assessment guarantees security. We report what was tested, what was found and what remained outside scope.
No. The package includes a scoped assessment, report and one hour with a qualified developer. Implementation and retesting are separately scoped.
Coming aboard? · Help shape the service
You ship. We keep watch. A proposed subscription for founders and teams who want someone watching their website, deployments and security posture after launch. No subscription is available yet.
100 Doubloons included monthly
500 Doubloons included monthly
Doubloons · Proposed usage
Doubloons would cover AI-powered explanations, tailored remediation plans, website-copy improvements, policy gap summaries and proposed code fixes. Routine monitoring and deterministic alerts would not consume Doubloons. Additional Doubloon packs would be available for purchase; pack pricing and redemption rates are not finalized.
No automatic production changes. Any code change requires your approval. No payment or account is collected by this poll.
Sound worth your doubloons?
One click. No signup, no payment, no commitment. We're testing demand before building the subscription.
Our own fleet · Real companies
We put our own websites under the same scrutiny we bring to yours. Explore the brands in our fleet and follow their security, search visibility and privacy assessments as results are verified.
Security, permissions, deployment safeguards and AI discoverability across a business software platform.
Issues found: Audit pending
Issues resolved: Verification pending
Technical security, research visibility, structured content and AI search readiness for an advisory website.
Issues found: Audit pending
Issues resolved: Verification pending
Security, content quality, accessibility, technical SEO and discoverability across a multi-product website.
Issues found: Audit pending
Issues resolved: Verification pending
Recruitment-site privacy, candidate-data safeguards, search indexing and AI-readable service information.
Issues found: Audit pending
Issues resolved: Verification pending
Every published issue count will link to an assessment date, defined scope, severity and remediation status. A finding counts as resolved only after a documented retest. Our goal is 100% of actionable findings resolved, with evidence. No invented scores and no claims that any site is breach-proof.
Expert help when you need it
Bring an experienced security engineer aboard for a second opinion, a technical review or help fixing what your scan uncovered. Browse vetted specialists by experience, credentials, timezone and availability, or let us match you with the right expert. Profiles use professional callsigns to protect privacy before booking.
See each engineer's expertise, qualifications, languages and availability. Pick someone who knows your stack.
Tell us what needs fixing and we'll help you find a qualified engineer with an available appointment.
Our $1,000 Boarding Party assessment includes an hour of expert consultation alongside the security review.
Ready to find out?
Tell us what you've shipped and which assessment you're considering. We'll confirm scope and next steps before testing.
Contact the crewEnquiries only. No testing begins without authorization.