Written reviewed report
Scope, evidence notes, prioritized actions and unknowns — within stated limits.
Notice / 公告
见己*内在地图已经迁移至 www.jianji.net。本网站已改版为网络安全专业站点。
Jianji * Inner Map has been migrated to www.jianji.net. This website is now a cybersecurity professional website.
Validation phase · Expert review first
Pre-launch HTTP security hygiene — with a human in the loop.
ShipAudit helps founders shipping with Lovable, Bolt, Replit, Cursor and similar tools understand public configuration risk before launch. Today we sell a scoped Founding Expert Review. Our own automated scanner is not live yet.
ShipAudit measures observable HTTP security hygiene within the stated scope. It is not a vulnerability scan, penetration test, compliance assessment, or security certification.
What you receive
A scoped launch decision, not a wall of scanner noise.
Public-surface focus
Observable HTTP hygiene and configuration review. No exploit attempts.
Human judgment
False-positive removal and a clear fix-before-launch versus ship-with-risk note.
Scope / Non-goals
Honest boundaries for this validation phase
In scope (founding review)
- Public HTTP surface of one app / one primary domain
- Observable hygiene: HTTPS, headers, cookies, obvious public misconfig
- Customer-supplied read-only screenshots or architecture notes
- Prioritized actions and false-positive call-outs
Out of scope
- Vulnerability exploitation, port scans, directory brute force
- Authenticated / login-session testing
- Full API or source-code audit
- Compliance certification (等保, GDPR “pass”, etc.)
- ShipAudit-branded automated public scanner (not shipped yet)
ShipAudit measures observable HTTP security hygiene within the stated scope. It is not a vulnerability scan, penetration test, compliance assessment, or security certification.
Founding offer
Founding Expert Review — $99
Limited to the first 10 paid orders. After payment and scope confirmation we deliver a written reviewed report within 3 business days.
- No passwords, cookies, or production secrets accepted
- We do not modify your code
- Extra scope is quoted separately — not squeezed into 90 minutes
Questions before paying? Email security@laws3.net. Mailto is for pre-sales only and is not proof of payment.