Launch-readiness checklist

The 52 checks that decide whether your app is ready

Shipping an app is the easy part now. Whether it’s secure, gets found, loads fast and can be shared is the part nobody surfaces to you. This is the whole checklist Actuant runs on any deployed URL — in a real browser, scored 0–100, the same every time.

Run the checklist on your app

Paste your URL — free to start. Or read the checklist below.

Delivery & speed

Whether the site loads at all — quickly, and over a secure, modern connection. Nothing else matters if the page never arrives.

  • Reachability & speed
  • HTTPS enforced
  • Compression
  • Modern HTTP
  • Redirect hygiene
  • Asset caching

Security

The headers and hygiene that decide how hard your deployed app is to attack from the outside. The half a repo scanner can't see.

  • HSTS
  • Content-Security-Policy
  • MIME-sniff guard
  • Clickjacking guard
  • Referrer-Policy
  • Permissions-Policy
  • No version leak
  • security.txt

Analytics

Whether you can actually see who's using the app — the difference between learning from your first users and guessing.

  • Analytics

SEO & indexing

Whether search engines can find, read and rank your pages. The gaps AI builders leave most often.

  • Title & description
  • Canonical URL
  • Indexable
  • Title length
  • Description length
  • robots.txt & sitemap
  • Single H1
  • Heading order
  • Image alt text
  • Internal links
  • Language declared

AI-search visibility

Whether AI assistants like ChatGPT and Perplexity can read and cite your app. They don't run JavaScript — so a client-only app is invisible to them.

  • llms.txt
  • AI crawlers allowed
  • Readable without JS
  • Semantic landmarks

Structured data

The machine-readable schema that helps search engines and AI answers understand what your app is.

  • Structured data
  • Organization schema

Social & sharing

Whether a link to your app unfurls as a real preview card instead of a blank rectangle when someone shares it.

  • Social preview
  • Open Graph completeness
  • Twitter card
  • Favicon
  • Apple touch icon
  • Web app manifest

Performance

How heavy the page is and what's blocking it from painting quickly — measured in a real browser, not a synthetic score.

  • Document weight
  • Third-party scripts
  • Render-blocking scripts
  • Lazy-loaded images
  • Image dimensions

Mobile

Whether the app is actually built for the phones most of your visitors will use.

  • Mobile viewport
  • Theme color

Trust

The signals — policies, company identity, a way to get in touch, social presence — that tell a stranger you're real.

  • Privacy policy
  • Terms
  • Company identity
  • Contact method
  • Social presence

Conversion

Whether a visitor can actually find the path to buy or sign up once they're interested.

  • Payment path
  • Primary call to action