Launchpad Verified

A live, public check that your app meets published security rules. Earn it, keep it, and show it to the customers and investors who ask.

The Four Levels

Level 1

Bronze

Secrets clean. The most dangerous fixes, done first.

Leaked secrets: none left, including in your code's history
No .env file committed to your repository
Legal pages: privacy policy and sub-processor disclosure published

Level 2

Silver

Baseline. No open doors.

Security: no open critical findings
Vulnerable dependencies: no critical flaws

Level 3

Gold

Hardened. Defended.

Security: no open high findings
Vulnerable dependencies: no high flaws
Missing security headers: every medium one added

Level 4

Platinum

Assured. And kept that way.

Gold held for 30 days in a row
Vulnerable dependencies: no medium flaws
Accessibility: no high findings
Reliability & Performance: no medium findings
Project setup: error monitoring, a pinned Node version and one lockfile
No more than 3 accepted risks, each with a reason

Show it where it counts

Add the badge to your site footer or README. It links to a public page anyone can check, showing your level and when it was last verified. Never your findings.

Launchpad verifiedGold3 Oct 2026

Launchpad verifiedLapsed4 Nov 2026

If a level is lost, the badge goes grey and says so. A badge that can lapse is one people can trust.

What your verification page shows

Launchpad verified

Gold

Held since: 3 Oct 2026
Last verified: 2 hours ago
Findings marked not applicable: 1

Automated continuous scan of code and live site. Not a certification or a penetration test.

The rules

Keeping your level

Your level is re-checked on every scan of your production branch.
A new critical finding gives you 7 days to fix it. A new high finding, or a newly disclosed dependency vulnerability, gives you 14.
While you fix it, your page says so openly, with the days left.
Run out of time and you drop to the level you still meet. Fix it and the level comes back. Platinum restarts its 30 days.
No successful scan for 7 days and your badge shows Not currently verified.

Fair for everyone

Only the automated checks count. AI security review findings are leads to confirm, so they never affect your level.
Findings you mark not applicable are always counted on your public page.
Only the branch you deploy from counts.
SEO, copy-pasted code, unused code and info findings never block a level.
Public badges are for subscribers, because a badge needs ongoing scanning to mean anything.

Launchpad Verified is an automated check against published rules. It is not a certification, an audit or a penetration test.

Start your way to Bronze today.

Your first scan shows exactly what stands between you and each level.

Scan my code for free