Builder
Base44
Base44 builds and hosts the whole app. When the platform has a flaw, every app on it inherits it.
3 checklists
Learn
Your builder did part of the work
Every AI coding tool handles some of the launch work for you and quietly leaves the rest. These ten pages say which is which, name the incidents involving each tool, and point at the checklist that applies to your stack.
10 buildersLast updated September 13, 2026
- Builder
Bolt
Bolt gets an app running fast. Speed is the point. Review is still yours.
4 checklists - Builder
Claude Code
Claude Code works in the terminal with real reach. Guardrails matter more here, not less.
4 checklists - Builder
Codex
Codex takes a task and reports what it touched. Keep the task small and the report honest.
4 checklists - Builder
Cursor
Cursor edits your repository. Nothing ships until you ship it, and that is the difference.
4 checklists - Builder
Firebase Studio
Firebase gives you storage and data in one step. The rules are the whole game.
3 checklists - Builder
Lovable
Lovable ships a hosted app with a backend behind it. It handles transport and hosting. It does not decide who may read a row.
4 checklists - Builder
Replit
Replit runs the whole workspace, including the agent. That is the power and the risk.
4 checklists - Builder
v0
v0 writes the interface. The server boundary is the part to watch.
3 checklists - Builder
Windsurf
Windsurf keeps the agent close to your editor. The review habit is still the product.
4 checklists
Check your app
Run all sixteen groups on your published address and see the evidence behind every result.
ShipReady is not a penetration test or a security certification. No automated check can prove an application is secure.
Last updated September 20, 2026