Does Launch Auditor work with Fly.io global apps?
Fly.io deploys are public URLs like any host. Scan the domain you will share — Launch Auditor validates clearance on the live production URL.
All launch resources
Fly.io deploy checklist
Fly.io app live — ready for launch traffic?
Global edge deploys need the same clearance bar as Vercel — custom domain certs, response headers on fly.toml, and production URL verification before your launch post goes live.
Supabase backend testing (optional)
Provide Supabase credentials to run deeper RLS and cross-tenant isolation probes. Secrets are encrypted at rest and never appear in scan reports.
Expand to add optional Supabase credentials.
DNS & SSL
Custom domain with valid TLS on production — not only the *.fly.dev hostname.
Audit check DNS-001 · dns ssl
Security & headers
Production deploys need baseline HTTP hardening before you share the URL.
Security headers via fly.toml [[services.http_options.response.headers]] or edge proxy.
Audit check SEC-001 · security
Secrets in fly secrets — not baked into Docker layers or client bundles.
Audit check SEC-020 · dns ssl
Performance
Core Web Vitals and load behavior under real traffic — not just localhost.
Core Web Vitals on production domain after machines are warm in primary region.
Audit check PERF-001 · performance
FAQ
Fly.io launch questions
Scan your Fly.io production URL
Supabase backend testing (optional)
Provide Supabase credentials to run deeper RLS and cross-tenant isolation probes. Secrets are encrypted at rest and never appear in scan reports.
Expand to add optional Supabase credentials.
Free tier · No credit card · Create account