https://shipreadyai.dev/builders/bolt

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# Bolt

Bolt gets an app running fast. Speed is the point. Review is still yours.

## What the builder handles for you

A working project from a prompt.
A deployment target and a public URL.
Environment values in the project settings.

## What it does not

It does not separate a preview environment from a production one for you.
It does not set response headers unless you ask.
It does not read your access rules.
It does not know which keys are safe in a browser.

## Incidents involving it

The Tenzai study covered five AI coding tools and found every one of them introduced server-side request forgery.
A scan of 5,600 vibe-coded apps found more than 2,000 vulnerabilities.

## The fix prompt dialect

Bolt takes the generic prompt. It names the one place to change, asks for a diff, and asks for the header line or the route back.

## Stack checklists that apply

Bolt, Vite, Supabase, Stripe.