Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. View the changelog here.

Don’t embarrass yourself in production. Just run the command.

brew install preflightsh/preflight/preflight

npm install -g @preflightsh/preflight

go install github.com/preflightsh/preflight@latest

docker pull ghcr.io/preflightsh/preflight

curl -sSL https://preflight.sh/install.sh | sh

Download the latest release from GitHub Releases.

# Initialize in your project directory
cd your-project
preflight init
# Run all checks
preflight scan
# Scan a specific directory
preflight scan /path/to/project
# Run with verbose output (shows which files matched each check)
preflight scan --verbose
preflight scan -v # short form
# Run in CI mode with JSON output
preflight scan --ci --format json
# Silence a check
preflight ignore sitemap
# Unsilence a check
preflight unignore sitemap
# List all check IDs
preflight checks

Preflight auto-detects and validates configuration for these services:

Payments

• Stripe, PayPal, Braintree, Paddle, LemonSqueezy

Error Tracking & Monitoring

• Sentry, Bugsnag, Rollbar, Honeybadger, Datadog, New Relic, LogRocket

Email & Newsletters

• Postmark, SendGrid, Mailgun, AWS SES, Resend, Mailchimp, Kit, Beehiiv, AWeber, ActiveCampaign, Campaign Monitor, Drip, Klaviyo, Buttondown

Analytics

• Plausible, Fathom, Fullres Analytics, Datafa.st Analytics, Google Analytics, PostHog, Mixpanel, Amplitude, Segment, Hotjar

Auth

• Auth0, Clerk, WorkOS

Chat

• Intercom, Crisp

Notifications

• Slack, Discord, Twilio

Infrastructure

• Firebase, Supabase, Redis, Sidekiq, RabbitMQ, Elasticsearch, Convex

Storage & CDN

• AWS S3, Cloudinary, Cloudflare

Search

• Algolia

SEO

• IndexNow

AI / LLMs

• OpenAI, Anthropic Claude, Google AI (Gemini), Mistral, Cohere, Replicate, Hugging Face, Grok (X/Twitter), Perplexity, Together AI

Preflight uses a preflight.yml file in your project root:

projectName: my-app
stack: rails # rails, next, react, vite, laravel, etc.
urls:
 staging: "https://staging.example.com"
 production: "https://example.com"
services:
 stripe:
 declared: true
 sentry:
 declared: true
checks:
 envParity:
 enabled: true
 envFile: ".env"
 exampleFile: ".env.example"
 healthEndpoint:
 enabled: true
 path: "/health" # optional - auto-detects common paths if not set
 stripeWebhook:
 enabled: true
 url: "https://api.example.com/webhooks/stripe"
 seoMeta:
 enabled: true
 mainLayout: "app/views/layouts/application.html.erb"
 security:
 enabled: true
 indexNow:
 enabled: true
 key: "your32characterhexkeyhere00000"
 emailAuth:
 enabled: true # opt-in, checks SPF/DMARC on production domain
 humansTxt:
 enabled: false # opt-in, credits the team
 license:
 enabled: false # opt-in, for open source projects
# Silence specific checks or services by ID
ignore:
 - sitemap
 - llmsTxt
 - google_analytics

Silence specific checks or services using preflight ignore <id>:

preflight ignore sitemap # Ignore sitemap check
preflight ignore sentry # Ignore Sentry service validation
preflight unignore sitemap # Re-enable sitemap check
preflight checks # List all ignorable IDs

SEO & Social: seoMeta, canonical, structured_data, indexNow (opt-in), ogTwitter, viewport, lang

Security & Infrastructure: securityHeaders, ssl, www_redirect, email_auth (opt-in), secrets

Environment & Health: envParity, healthEndpoint

Code Quality & Performance: vulnerability, debug_statements, error_pages, image_optimization

Legal & Compliance: legal_pages

Web Standard Files: favicon, robotsTxt, sitemap, llmsTxt, adsTxt (opt-in), humansTxt (opt-in), license (opt-in)

All services have validation checks that verify proper integration (env vars, SDK patterns, config files):

Payments: stripe, paypal, braintree, paddle, lemonsqueezy

Error Tracking: sentry, bugsnag, rollbar, honeybadger, datadog, newrelic, logrocket

Transactional Email: postmark, sendgrid, mailgun, aws_ses, resend

Email Marketing: mailchimp, convertkit, beehiiv, aweber, activecampaign, campaignmonitor, drip, klaviyo, buttondown

Analytics: plausible, fathom, google_analytics, fullres, datafast, posthog, mixpanel, amplitude, segment, hotjar

Auth: auth0, clerk, workos, firebase, supabase

Communication: twilio, slack, discord, intercom, crisp

Infrastructure: redis, sidekiq, rabbitmq, elasticsearch, convex

Storage & CDN: aws_s3, cloudinary, cloudflare

Search: algolia

AI: openai, anthropic, google_ai, mistral, cohere, replicate, huggingface, grok, perplexity, together_ai

SEO: indexnow

Cookie Consent: cookieconsent, cookiebot, onetrust, termly, cookieyes, iubenda

Backend Frameworks

• Ruby on Rails, Laravel, PHP, Go, Python/Django, Rust, Node.js

Frontend Frameworks

• Next.js, Nuxt, Remix, React, Vue.js, Vite, Svelte, Angular

Traditional CMS

• WordPress, Craft CMS, Drupal, Ghost

Static Site Generators

• Hugo, Jekyll, Gatsby, Eleventy (11ty), Astro

Headless CMS

• Strapi, Sanity, Contentful, Prismic

Other

• Static sites

# GitHub Actions example (curl)
- name: Run Preflight
 run: |
 curl -sSL https://raw.githubusercontent.com/preflightsh/preflight/main/install.sh | sh
 preflight scan --ci --format json

# GitHub Actions example (Docker)
- name: Run Preflight
 run: docker run -v ${{ github.workspace }}:/app ghcr.io/preflightsh/preflight scan --ci --format json

MIT