ReadyToLaunchBot

The free scan identifies itself. It does not log in and it does not call your database API.

User agent

ReadyToLaunchBot/1.0 (+https://readytolaunch.cc/bot)

What a scan fetches

The HTML document, same-origin JavaScript (and a few public CDNs), source maps linked from those files, and a fixed list of paths: /.env, /.env.local, /.env.production, /.git/HEAD, /.git/config, /package.json, /robots.txt, and /.well-known/readytolaunch-optout. Limits: 40 files, 12 MB, 8 seconds per request, 5 redirects, ports 80 and 443 only.

Private, loopback, and link-local addresses are refused, including cloud metadata IPs. We resolve DNS and connect to that address so a name cannot flip to an internal IP after the check.

Opt out

In robots.txt:

User-agent: ReadyToLaunchBot
Disallow: /

Or return any non-HTML body from /.well-known/readytolaunch-optout with status 200.