# ShipVibed

> A hand-checked directory of AI builders, hosting, database, auth, payments, security and monitoring tools for taking AI-built apps (Lovable, Bolt, Cursor, Replit, v0) to production, plus fix guides for the errors that show up on deploy day.

Free-tier facts were checked against official vendor pages on 2026-11-11. Each tool page links its sources.
Contact: hello@shipvibed.com

Some outbound tool links are affiliate links (currently Lovable, UptimeRobot, Better Stack). They never affect which tools are listed or how they are ranked.

## Fix guides
- [What Lovable's security scan covers, and what it doesn't](https://shipvibed.com/guides/lovable-security-scan-vs-production-review/): Lovable's Quick scan, Deep scan and auto-fix compared with a free outside checker, a manual production review and a pentest, area by area: RLS, secrets, SPA routing, env vars, webhooks, CORS, headers, monitoring and free-tier limits.
- [supabaseUrl is required](https://shipvibed.com/guides/env-vars-undefined-in-production/): Fix "supabaseUrl is required" in production: use the VITE_ or NEXT_PUBLIC_ prefix, set the vars on the host, and rebuild. Don't put secret keys in them.
- [redirects to localhost:3000 after deploy](https://shipvibed.com/guides/supabase-auth-redirects-to-localhost/): Sign-up or OAuth redirects to localhost:3000 after deploy. Set the Supabase Site URL and Redirect URLs to your production domain, and pass redirectTo.
- [404 on refresh (404: NOT_FOUND)](https://shipvibed.com/guides/spa-404-on-refresh-vercel-netlify/): A 404 on refresh of a deep route returns 404: NOT_FOUND on Vercel or "Page not found" on Netlify. Add one SPA rewrite to index.html.
- [No signatures found matching the expected signature](https://shipvibed.com/guides/stripe-webhook-signature-verification-failed/): Fix "No signatures found matching the expected signature for payload": use the right whsec_ secret, verify the raw body, and check failed deliveries.
- [new row violates row-level security policy](https://shipvibed.com/guides/supabase-new-row-violates-row-level-security/): Fix "new row violates row-level security policy" (Postgres 42501) in Supabase: add an insert policy, send user_id, and confirm a session.
- [blocked by CORS policy: No 'Access-Control-Allow-Origin' header](https://shipvibed.com/guides/blocked-by-cors-policy-split-origin/): Fix "blocked by CORS policy" when your front-end and API live on different domains: answer the OPTIONS preflight, allow your real production origin, and never mix * with cookies.
- [Replit publishing fails: listen on 0.0.0.0](https://shipvibed.com/guides/replit-publish-fails-port-0-0-0-0/): Replit Preview works but publishing fails, or the live URL is broken. Listen on 0.0.0.0, add Secrets in the Publishing pane, and keep the homepage fast.

## Production checklist
- [Production checklist](https://shipvibed.com/checklist/): what to verify before launching an AI-built app
- [Production Readiness Checker](https://shipvibed.com/check/): free tool that scans a live app URL for leaked API keys, 404 on refresh, localhost leftovers, HTTPS and SEO basics, and links each result to its fix

## AI builders tools
- [Lovable](https://shipvibed.com/tools/builders/lovable/): Free plan: 5 daily build credits, capped at 30 per calendar month; 20 Cloud credits and 4 AI credits per month; You can build and publish without paying; workspaces have unlimited members

## Hosting tools
- [Vercel](https://shipvibed.com/tools/hosting/vercel/): Hobby plan: $0/month, 1 developer seat; 100 GB/month Fast Data Transfer and 1M CDN requests/month; 1M function invocations and 4 hours of active CPU per month; Automatic HTTPS, preview deployments and instant rollback
- [Netlify](https://shipvibed.com/tools/hosting/netlify/): Free plan: $0 forever with a 300-credit monthly limit; Custom domains with SSL, unlimited deploy previews, global CDN; Credit costs: 15 credits per production deploy, 20 credits per GB of bandwidth
- [Cloudflare Pages](https://shipvibed.com/tools/hosting/cloudflare-pages/): 500 builds/month, 1 build at a time; Up to 100 custom domains per project; Up to 20,000 files per site, 25 MiB max per file; Unlimited preview deployments
- [Render](https://shipvibed.com/tools/hosting/render/): Free web services: 750 free instance hours per workspace per month; Free static sites (count against included bandwidth and build minutes); One free Postgres database (1 GB) and one free Key Value instance per workspace

## Database tools
- [Supabase](https://shipvibed.com/tools/database/supabase/): 500 MB database, 1 GB file storage, 5 GB egress plus 5 GB cached egress; 50,000 monthly active users for Auth; Unlimited API requests, up to 2 active free projects; 500,000 Edge Function invocations
- [Neon](https://shipvibed.com/tools/database/neon/): Up to 100 projects, no credit card required; 100 CU-hours of compute per project per month; 1 GB storage per project (20 GB total across projects); 5 GB egress per project; compute scales to zero after 5 minutes idle
- [Turso](https://shipvibed.com/tools/database/turso/): $0/month, no credit card required; 100 databases and 5 GB of storage; 500 million rows read and 10 million rows written per month
- [Firebase (Cloud Firestore)](https://shipvibed.com/tools/database/firebase/): Spark plan: no payment method needed; Firestore: 1 GiB stored, 50K reads/day, 20K writes/day, 20K deletes/day; 10 GiB/month network egress; Hosting: 10 GB storage, 360 MB/day transfer

## Auth tools
- [Clerk](https://shipvibed.com/tools/auth/clerk/): Hobby: free, no credit card required; 50,000 monthly retained users per app; Up to 3 social connections, email codes, magic links, passwords; Custom domain, basic bot and brute-force protection
- [Auth0](https://shipvibed.com/tools/auth/auth0/): Free plan: up to 25,000 monthly active users, no credit card to sign up; Unlimited social connections, passwordless and passkeys; 1 custom domain, 5 organizations, 1 enterprise connection
- [Supabase Auth](https://shipvibed.com/tools/auth/supabase-auth/): 50,000 monthly active users on the Free plan; Social OAuth providers, anonymous sign-ins, basic MFA; Custom SMTP server supported
- [Better Auth](https://shipvibed.com/tools/auth/better-auth/): Open-source library: no per-user fees when self-hosted; Works with Next.js, Nuxt, SvelteKit, Astro, Hono and more; Bring your own database

## Payments tools
- [Stripe](https://shipvibed.com/tools/payments/stripe/): No setup or monthly fees; you pay per successful transaction; US pricing: 2.9% + 30¢ per domestic card charge; +1.5% for international cards (US pricing page); Payment Links and Checkout at no extra charge on standard pricing
- [Lemon Squeezy](https://shipvibed.com/tools/payments/lemon-squeezy/): No monthly fee; 5% + 50¢ per transaction; Email marketing free up to 500 subscribers
- [Polar](https://shipvibed.com/tools/payments/polar/): Starter plan: no monthly fee; 5% + 50¢ per transaction; +1.5% for international (non-US) cards

## Security tools
- [GitHub Secret Scanning Push Protection](https://shipvibed.com/tools/security/github-push-protection/): Push protection for users is on by default for every GitHub.com account; Stops you from pushing supported secrets to public repositories
- [Gitleaks](https://shipvibed.com/tools/security/gitleaks/): Open source and free to run
- [Snyk](https://shipvibed.com/tools/security/snyk/): Free plan for individual developers and small teams; Test limits: 200 Open Source, 100 Code, 300 IaC and 100 Container tests
- [Cloudflare (Free plan)](https://shipvibed.com/tools/security/cloudflare/): DDoS mitigation and global CDN; Free shared SSL certificate; DNS hosting

## Monitoring tools
- [Sentry](https://shipvibed.com/tools/monitoring/sentry/): Developer plan: free for one user; Error monitoring and tracing, email alerts
- [PostHog](https://shipvibed.com/tools/monitoring/posthog/): 1M analytics events, 5K session recordings, 1M feature-flag requests per month; 100K exceptions for error tracking; No credit card; usage stops at the free limits on the free plan
- [UptimeRobot](https://shipvibed.com/tools/monitoring/uptimerobot/): 50 monitors at a 5-minute interval; HTTP, keyword, ping and port monitors; 1 basic status page; allowed for personal and commercial projects
- [Better Stack](https://shipvibed.com/tools/monitoring/better-stack/): 10 monitors and heartbeats, 1 status page; 100,000 exceptions per month, 5,000 session replays; 3 GB logs retained for 3 days

## Optional
- [About & editorial policy](https://shipvibed.com/about/)
- [Full text for LLMs](https://shipvibed.com/llms-full.txt): every fix guide and tool entry in one plain-text file