Your app works.
Now make it safe to charge for.
Last Mile is the launch kit for vibe-coded apps: 100 checks and 43 copy-paste prompts that turn your AI coding agent into your pre-launch auditor.
- ✗ Your OpenAI or Stripe secret key is in the JS bundle. Checks 1.4–1.5 and prompts P01–P02 find it; the free URL check flags it.
- ✗ Any logged-in user can read anyone's rows. RLS and IDOR checks 2.2–2.3 (P05, P06) with a two-account test.
- ✗ Paid features unlock on the /success page. Stripe checks 8.2–8.3 grant access from the verified webhook only (P25, P26).
Free pre-launch check
Paste a public URL. We scan headers, secret patterns in JS, /.env, source maps and basic SEO.
Guides
RLS, Stripe webhooks, leaked keys, and how to ship Cursor / Claude Code apps without drama.
Read guides →What it does
Last Mile turns your AI coding agent into your pre-launch auditor. It finds the problems, waits for your go, fixes one thing at a time, and tells you how to verify each fix. Ground Rules and drop-in rules files keep the agent on a leash, so it doesn't "fix" 20 files you didn't ask about.
What's inside
- ✓ 100 checks in 14 sections, from secrets and auth to Stripe, backups and AI features
- ✓ 43 copy-paste prompts, each tied to the checks it covers
- ✓ Drop-in agent rules files for Cursor, Claude Code and Codex, plus a paste-in version for Lovable, Bolt and Replit (Pro)
- ✓ A 1-page quick start and a launch-day run order
- ✓ "When to stop vibing and get a human"
- files: 28-page PDF · checklist.md (Notion-ready) · prompts.md · CHANGELOG.md
Look inside
Who it's for
Solo builders and small teams with a working app that will hold real user data or take real money.
Not for: teams with a security engineer, or apps handling health records, children's data or payouts between users without expert help.
Pricing
Standard
- The full 28-page PDF
checklist.mdandprompts.md- Changelog and every v1.x update
Pro
- Everything in Standard
- Agent rules:
AGENTS.md,CLAUDE.md,.cursor/rules/last-mile.mdc,paste-into-chat.txt - Stack editions of P04, P05, P06, P25, P26, P37 for Next.js + Supabase + Stripe and React + Firebase + Stripe
- Every v1.x and v2 update
Full refund within 14 days, no questions. Checkout on Gumroad.
FAQ
What is Last Mile?
Last Mile: The Launch Kit for Vibe-Coded Apps is a pre-launch checklist and prompt pack: 100 checks in 14 sections and 43 copy-paste prompts that turn your AI coding agent into a pre-launch auditor. It costs $9 (Standard) or $19 (Pro) at launch, normally $12 and $24.
Do I need to know how to code?
You need to read a diff and follow steps. If you don't use a terminal, checks that need one carry "No terminal?" notes, and prompt P42 walks your builder through any check.
Which tools does it work with?
Cursor, Claude Code, Codex, Lovable, Bolt and Replit.
Does it guarantee my app is secure?
No. It catches the common, costly mistakes. Checking every box lowers your risk. It does not guarantee your app is secure. It is practical guidance, not legal, tax or professional security advice.
What's the difference between Standard and Pro?
Standard ($9 launch, $12 regular) includes the 28-page PDF, checklist.md, prompts.md and the changelog. Pro ($19 launch, $24 regular) adds drop-in agent rules files for Cursor, Claude Code and Codex plus a paste-in version for Lovable, Bolt and Replit, stack editions of the six highest-risk prompts for Next.js + Supabase + Stripe and React + Firebase + Stripe, and every v1.x and v2 update.
Do I get updates?
Yes. Buyers get every v1.x update free by email through Gumroad. Pro buyers also get v2.
Refunds?
Full refund within 14 days, no questions. Reply to your Gumroad receipt to ask for one.
How do I get help?
Reply to your Gumroad receipt.
Get launch notes
$ subscribe --launch-notes # new checks, prompts and shipping tips for vibe coders. No spam.