# ShipVibed

> A hand-checked directory of hosting, database, auth, payments, security and monitoring tools for taking AI-built apps (Lovable, Bolt, Cursor, Replit, v0) to production, plus fix guides for the errors that show up on deploy day.

Free-tier facts were checked against official vendor pages on 2026-11-11. Each tool page links its sources.

## Fix guides
- [Environment variables are undefined in production (Vite and Next.js apps from Cursor, v0 and Bolt)](https://shipvibed.pages.dev/guides/env-vars-undefined-in-production/): supabaseUrl is required, API key undefined, fetch to "undefined/api"… Why browser-side env vars must use the VITE_ or NEXT_PUBLIC_ prefix, why you must rebuild after changing them, and what never to put in them.
- [Supabase confirmation and magic-link emails redirect to localhost after deploy](https://shipvibed.pages.dev/guides/supabase-auth-redirects-to-localhost/): Your app is live but sign-up confirmation, password reset or OAuth sends users to http://localhost:3000. Here is the Supabase URL setting that causes it and how to set it for production and preview URLs.
- [Replit app works in Preview but publishing fails or the live URL is broken](https://shipvibed.pages.dev/guides/replit-publish-fails-port-0-0-0-0/): The most common reasons a Replit app passes in Preview but fails to publish: the server listens on localhost instead of 0.0.0.0, Secrets were not added to the deployment, or the homepage is too slow for the health check.
- [404 on page refresh after deploying a Bolt or Lovable app to Vercel or Netlify](https://shipvibed.pages.dev/guides/spa-404-on-refresh-vercel-netlify/): The home page loads but refreshing /dashboard, or opening a shared link, returns 404 NOT_FOUND. Single-page apps need one rewrite rule. Here it is for Vercel and Netlify.
- [Fix "new row violates row-level security policy" in Lovable and Supabase apps](https://shipvibed.pages.dev/guides/supabase-new-row-violates-row-level-security/): Why inserts fail with Postgres error 42501 after you enable RLS on Supabase, and the exact policies and grants that fix it without opening your table to everyone.

## Production checklist
- [Production checklist](https://shipvibed.pages.dev/checklist/): what to verify before launching an AI-built app

## Hosting tools
- [Vercel](https://shipvibed.pages.dev/tools/hosting/vercel/): Hobby plan: $0/month, 1 developer seat; 100 GB/month Fast Data Transfer and 1M CDN requests/month; 1M function invocations and 4 hours of active CPU per month; Automatic HTTPS, preview deployments and instant rollback
- [Netlify](https://shipvibed.pages.dev/tools/hosting/netlify/): Free plan: $0 forever with a 300-credit monthly limit; Custom domains with SSL, unlimited deploy previews, global CDN; Credit costs: 15 credits per production deploy, 20 credits per GB of bandwidth
- [Cloudflare Pages](https://shipvibed.pages.dev/tools/hosting/cloudflare-pages/): 500 builds/month, 1 build at a time; Up to 100 custom domains per project; Up to 20,000 files per site, 25 MiB max per file; Unlimited preview deployments
- [Render](https://shipvibed.pages.dev/tools/hosting/render/): Free web services: 750 free instance hours per workspace per month; Free static sites (count against included bandwidth and build minutes); One free Postgres database (1 GB) and one free Key Value instance per workspace

## Database tools
- [Supabase](https://shipvibed.pages.dev/tools/database/supabase/): 500 MB database, 1 GB file storage, 5 GB egress; 50,000 monthly active users for Auth; Unlimited API requests, up to 2 active free projects; 500,000 Edge Function invocations
- [Neon](https://shipvibed.pages.dev/tools/database/neon/): Up to 100 projects, no credit card required; 100 CU-hours of compute per project per month; 1 GB storage per project (20 GB total across projects); 5 GB egress per project; compute scales to zero after 5 minutes idle
- [Turso](https://shipvibed.pages.dev/tools/database/turso/): $0/month, no credit card required; 100 databases and 5 GB of storage; 500 million rows read and 10 million rows written per month
- [Firebase (Cloud Firestore)](https://shipvibed.pages.dev/tools/database/firebase/): Spark plan: no payment method needed; Firestore: 1 GiB stored, 50K reads/day, 20K writes/day, 20K deletes/day; 10 GiB/month network egress; Hosting: 10 GB storage, 360 MB/day transfer

## Auth tools
- [Clerk](https://shipvibed.pages.dev/tools/auth/clerk/): Hobby: free, no credit card required; 50,000 monthly retained users per app; Up to 3 social connections, email codes, magic links, passwords; Custom domain, basic bot and brute-force protection
- [Auth0](https://shipvibed.pages.dev/tools/auth/auth0/): Free plan: up to 25,000 monthly active users, no credit card to sign up; Unlimited social connections, passwordless and passkeys; 1 custom domain, 5 organizations, 1 enterprise connection
- [Supabase Auth](https://shipvibed.pages.dev/tools/auth/supabase-auth/): 50,000 monthly active users on the Free plan; Social OAuth providers, anonymous sign-ins, basic MFA; Custom SMTP server supported
- [Better Auth](https://shipvibed.pages.dev/tools/auth/better-auth/): Open-source library: no per-user fees when self-hosted; Works with Next.js, Nuxt, SvelteKit, Astro, Hono and more; Bring your own database

## Payments tools
- [Stripe](https://shipvibed.pages.dev/tools/payments/stripe/): No setup or monthly fees; you pay per successful transaction; US pricing: 2.9% + 30¢ per domestic card charge; +1.5% for international cards (US pricing page); Payment Links and Checkout at no extra charge on standard pricing
- [Lemon Squeezy](https://shipvibed.pages.dev/tools/payments/lemon-squeezy/): No monthly fee; 5% + 50¢ per transaction; Email marketing free up to 500 subscribers
- [Polar](https://shipvibed.pages.dev/tools/payments/polar/): Starter plan: no monthly fee; 5% + 50¢ per transaction; +1.5% for international (non-US) cards

## Security tools
- [GitHub Secret Scanning Push Protection](https://shipvibed.pages.dev/tools/security/github-push-protection/): Push protection for users is on by default for every GitHub.com account; Stops you from pushing supported secrets to public repositories
- [Gitleaks](https://shipvibed.pages.dev/tools/security/gitleaks/): Open source and free to run
- [Snyk](https://shipvibed.pages.dev/tools/security/snyk/): Free plan for individual developers and small teams; Test limits: 200 Open Source, 100 Code, 300 IaC and 100 Container tests
- [Cloudflare (Free plan)](https://shipvibed.pages.dev/tools/security/cloudflare/): DDoS mitigation and global CDN; Free shared SSL certificate; DNS hosting

## Monitoring tools
- [Sentry](https://shipvibed.pages.dev/tools/monitoring/sentry/): Developer plan: free for one user; Error monitoring and tracing, email alerts
- [PostHog](https://shipvibed.pages.dev/tools/monitoring/posthog/): 1M analytics events, 5K session recordings, 1M feature-flag requests per month; 100K exceptions for error tracking; No credit card; usage stops at the free limits on the free plan
- [UptimeRobot](https://shipvibed.pages.dev/tools/monitoring/uptimerobot/): 50 monitors at a 5-minute interval; HTTP, keyword, ping and port monitors; 1 basic status page; allowed for personal and commercial projects
- [Better Stack](https://shipvibed.pages.dev/tools/monitoring/better-stack/): 10 monitors and heartbeats, 1 status page; 100,000 exceptions per month, 5,000 session replays; 3 GB logs retained for 3 days

## Optional
- [About & editorial policy](https://shipvibed.pages.dev/about/)