Report
The state of AI-built apps
We ran Launchpad’s launch check on 334 public apps built with Lovable, Bolt and v0, each updated since 8 September 2026. Here is what they would ship with.
32%had at least one thing to fix before launch
80/100median launch score
33%were launch-ready (90 or more)
What they’d ship with
| Finding | Must fix | Worth fixing |
|---|---|---|
| .env file committed | 23% | — |
| Policies that let anyone change data | 19% | — |
| Tables without Row Level Security | 7% | — |
| Supabase admin key used in browser code | 6% | — |
| Secrets exposed to the browser | 1% | — |
| Secret keys committed to the repo | 1% | — |
| No Stripe webhook handler | 0% | 2% |
| Imports that only work on your computer | 0% | — |
| No health check URL | — | 72% |
| No security headers | — | 71% |
| .env files aren't ignored by git | — | 51% |
| Forms have no bot check | — | 51% |
Share of all 334 apps. Each finding links to its step-by-step fix where there is one.
By tool
| Built with | Apps | Median score | Something to fix before launch |
|---|---|---|---|
| Bolt | 115 | 90/100 | 12% |
| Lovable | 108 | 55/100 | 79% |
| v0 | 111 | 85/100 | 7% |
The tools build very different apps, so this compares what their users ship, not the tools themselves.
How this was done
- Apps were found by searching public GitHub repositories for the text each tool puts in the README it exports, among repositories pushed since 8 September 2026: up to 120 picked at random per tool, without forks or archives.
- Each was read once and checked by the same launch check anyone can run on this site. 26 of the 360 picked couldn’t be read (removed, made private or too big) and aren’t counted.
- Only the totals are kept. No repository is named here or stored, and the check never reads out a key, only that one is there.
- A public repository isn’t always a launched app: some are experiments or templates. The check reads code, so it can’t see settings made only in a dashboard, such as security rules turned on there.
Ran 7 November 2026. It runs again each month, and this page updates by itself.
Is yours on this list?
The same check, on your app: free, no account, and the code isn’t kept. Then Launchpad deploys it on accounts you own, free for one project.