https://shipreadyai.dev/tools

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# Free tools

Every page under https://shipreadyai.dev/tools, 6 in total.

- [Free tools](https://shipreadyai.dev/tools.md): Five free single purpose checks: security headers, source maps, email authentication, backend table exposure and package names. Each one runs part of the full Launch Risk Check.
- [Security headers check](https://shipreadyai.dev/tools/security-headers.md): Read the response headers on your published app: HSTS, Content-Security-Policy, frame protection, referrer policy and permissions policy. Evidence and a fix prompt, no account.
- [Source map exposure check](https://shipreadyai.dev/tools/source-maps.md): Find out whether your published JavaScript bundles still point at source maps, and what those maps hand to anyone who asks for them. Evidence and a fix prompt, no account.
- [Email authentication check](https://shipreadyai.dev/tools/email-authentication.md): Check the SPF and DMARC records on your app's domain, the records that decide whether your password reset lands in the inbox and whether a stranger can send mail as you.
- [Backend exposure test](https://shipreadyai.dev/tools/supabase-exposure.md): Ask your own backend, with the key your app already publishes, which tables, file buckets and collections answer an anonymous request, and what your sign in settings allow. Names and counts only, never the contents of a row or a file.
- [Package name check](https://shipreadyai.dev/tools/package-check.md): Paste your dependency list and find out which package names have no published package behind them. The answer is the public registry's own status code, with no account.