Tools
23 tools across 6 categories. Every free-tier line was checked against the vendor's official pricing or docs page, linked on each tool page.
Hosting
Where your app lives once it leaves the AI builder preview.
Vercel
Git-connected hosting with a global CDN, serverless functions and preview deployments for every push. The default target for Next.js and v0 projects, and it also deploys Vite apps exported from Bolt or Lovable.
Free: Hobby plan: $0/month, 1 developer seatNetlify
Static and serverless hosting with deploy previews, functions, forms and a CDN. Popular for Vite/React SPAs exported from AI builders.
Free: Free plan: $0 forever with a 300-credit monthly limitCloudflare Pages
Static site hosting on Cloudflare's network with Git integration, unlimited preview deployments and optional Functions (which run on Workers).
Free: 500 builds/month, 1 build at a timeRender
Hosting for long-running web services (Node, Python, Rails and more), static sites, Postgres and Redis-compatible Key Value. Useful when your app has a real backend server, not just a front-end.
Free: Free web services: 750 free instance hours per workspace per monthDatabase
Managed Postgres, SQLite and document stores with free tiers.
Supabase
Hosted Postgres with auth, storage, realtime and edge functions in one project. It is the backend Lovable and many Bolt apps connect to.
Free: 500 MB database, 1 GB file storage, 5 GB egressNeon
Serverless Postgres that scales to zero when idle, with database branching. Works with any Postgres client or ORM (Prisma, Drizzle).
Free: Up to 100 projects, no credit card requiredTurso
Hosted SQLite-compatible databases. Lightweight enough to give every user or tenant their own database.
Free: $0/month, no credit card requiredFirebase (Cloud Firestore)
Google's app platform: Firestore document database, Auth, Hosting and Cloud Messaging. Common in apps built with Firebase Studio.
Free: Spark plan: no payment method neededAuth
Sign-up, login, sessions and social sign-in without writing it from scratch.
Clerk
Drop-in authentication and user management with prebuilt sign-in, sign-up and profile UI components. Bills on monthly retained users instead of raw sign-ups.
Free: Hobby: free, no credit card requiredAuth0
Okta's hosted identity platform: universal login, social and passwordless sign-in, organizations and enterprise connections.
Free: Free plan: up to 25,000 monthly active users, no credit card to sign upSupabase Auth
The auth service built into every Supabase project: email/password, magic links, OAuth providers and anonymous sign-ins, tied directly to Row Level Security.
Free: 50,000 monthly active users on the Free planBetter Auth
An open-source TypeScript authentication framework that runs inside your own app and database. Plugins add 2FA, passkeys, magic links, organizations, SSO and more.
Free: Open-source library: no per-user fees when self-hostedPayments
Taking money: payment processors and merchants of record.
Stripe
The standard payments API: cards, wallets, subscriptions (Billing), hosted Checkout and no-code Payment Links.
Free: No setup or monthly fees; you pay per successful transactionLemon Squeezy
A merchant of record for digital products and SaaS. It collects and remits sales tax and VAT for you, and handles subscriptions, license keys and checkout.
Free: No monthly feePolar
A developer-focused merchant of record for subscriptions, one-off sales and usage billing, with publicly posted rates.
Free: Starter plan: no monthly feeSecurity
Catch leaked keys, vulnerable dependencies and attacks before users do.
GitHub Secret Scanning Push Protection
Blocks git pushes that contain recognized secrets (API keys, tokens, private keys) before they land in your repository.
Free: Push protection for users is on by default for every GitHub.com accountGitleaks
An open-source command-line tool that scans git repositories, files and history for hardcoded secrets. Can run locally, as a pre-commit hook or in CI.
Free: Open source and free to runSnyk
Scans your dependencies (SCA), source code (SAST), infrastructure-as-code and containers for known vulnerabilities, with IDE, CLI and Git integrations.
Free: Free plan for individual developers and small teamsCloudflare (Free plan)
Put Cloudflare's proxy and DNS in front of your domain for DDoS mitigation, a CDN and a free SSL certificate, whichever host you use.
Free: DDoS mitigation and global CDNMonitoring
Know when it breaks: errors, uptime, logs and product analytics.
Sentry
Error monitoring and tracing. See the stack trace, the browser and the release behind every crash your users hit.
Free: Developer plan: free for one userPostHog
Product analytics, session replay, feature flags, error tracking and surveys in one tool, with a free allowance that resets every month.
Free: 1M analytics events, 5K session recordings, 1M feature-flag requests per monthUptimeRobot
Pings your site, API or port on a schedule and alerts you when it goes down. Includes a basic public status page.
Free: 50 monitors at a 5-minute intervalBetter Stack
Uptime monitoring, status pages, logs and Sentry-compatible error tracking on one platform.
Free: 10 monitors and heartbeats, 1 status page