Does Launch Auditor scan API endpoints?
Launch Auditor crawls public web pages — docs, portals, and marketing sites. It validates headers, metadata, and trust pages on those URLs. Use code scans and authenticated checks for private API surfaces.
All launch resources
API & developer portal checklist
Launching a public API or developer portal?
Docs sites, OpenAPI references, and status pages have distinct launch requirements — CORS on docs, security headers on static hosts, accurate metadata for SDK pages, and trust signals for API key signup.
Supabase backend testing (optional)
Provide Supabase credentials to run deeper RLS and cross-tenant isolation probes. Secrets are encrypted at rest and never appear in scan reports.
Expand to add optional Supabase credentials.
Security & headers
Production deploys need baseline HTTP hardening before you share the URL.
Security headers on docs and developer portal static hosts.
Audit check SEC-001 · security
CORS policy documented and not wildcard on authenticated endpoints.
Audit check SEC-012 · security
No API keys or secrets in public docs or example code blocks.
Audit check SEC-020 · dns ssl
SEO & discoverability
Metadata, crawlability, and structured data that search and AI systems rely on.
Each SDK/language page has unique title and description.
Audit check SEO-001 · seo
TechnicalArticle or SoftwareApplication schema on docs homepage.
Audit check SEO-015 · seo
Trust & legal
Policy pages, contact signals, and checkout trust before paid or viral traffic.
Terms of service and API usage policy linked from docs footer.
Audit check TRUST-001 · trust
Status page or health endpoint linked before GA announcement.
Audit check TRUST-006 · trust
AI visibility
Help ChatGPT, Claude, Perplexity, and Google AI cite your product accurately.
llms.txt pointing to OpenAPI spec, auth guide, and rate limits.
Audit check AIV-001 · ai visibility
FAQ
API launch launch questions
Audit your developer portal
Supabase backend testing (optional)
Provide Supabase credentials to run deeper RLS and cross-tenant isolation probes. Secrets are encrypted at rest and never appear in scan reports.
Expand to add optional Supabase credentials.
Free tier · No credit card · Create account