Guides

Command Center

The PreFlight dashboard is organized around the questions a launch team asks before and after a deploy: Is the workspace healthy? Which provider needs attention? What failed, and should we block the release? Can we show proof to a customer?

Every surface reflects stored probe rows, samples, and audit events — never demo telemetry. Empty sections stay empty until your workspace has real projects, integrations, checks, alerts, or reports.

How navigation is structured

The sidebar is organized around seven outcomes: Overview, Audit, Deploy, Health, Revenue, Growth, and Trust. Expanding an outcome reveals every related tool. All routes exposes deeper app, SEO, setup, and configuration pages; the Workspace section keeps Operator, apps, connections, activity, scheduled tasks, usage, settings, Help, Docs, and feedback reachable without hiding them behind search.

Use Cmd/Ctrl+K to jump to a project, incident, or alert without hunting through tabs.

Workspace surfaces

Overview

Overview is the starting point. It shows the workspace health banner, setup progress, readiness score, provider coverage, seven-day trend, open issues, and recent activity.

Use Overview when you need the shortest answer to "are we okay right now?"

Projects

Projects are the apps PreFlight is allowed to check. Each project owns its saved URL, connected providers, check history, monitoring sessions, guardrails, Trust Center, and settings.

Project tabs map directly to launch workflows:

| Tab | Route | Primary question | | --- | --- | --- | | Overview | `/dashboard/projects/:id` | What is this project's current posture? | | Checks | `…/checks` | What did the latest run prove? | | Integrations | `…/integrations` | Which providers are connected and when were they last tested? | | Monitoring | `…/monitoring` | Is the 24-hour release window active? | | Guardrails | `…/guardrails` | Are Database Change Check and release guardrails clean? | | Trust Center | `…/trust-center` | What can we publish to customers? | | Settings | `…/settings` | URL, environment labels, and project metadata |

The readiness URL scanner only uses the URL saved on the project. Do not point it at unrelated domains.

Pre-Flight Checks

Pre-Flight Checks (/dashboard/checks) run one deterministic suite across your saved app URL and every connected provider. Each probe returns success, warning, or failed with response time and a fix suggestion.

Checks are split into focused views:

| View | What it covers | | --- | --- | | Full runs | The complete standard check for a project | | App URL checks | DNS, SSL, SEO, legal pages, performance, and **Exposed Secrets** scanning for leaked keys in HTML/JS bundles | | Provider checks | Credentials, callback URLs, permissions, quotas, and provider-specific reachability — including **Webhook diagnostics** for Stripe, Lemon Squeezy, and Discord | | Fix list | Failed and warning probes only | | AI Review | Optional Cerebras-backed diagnosis built from stored probe rows, with deterministic fallback if AI is unavailable |

Disconnected providers appear as skipped so the run is easy to explain to the team.

Test Checkout

Shadow mode validates the full checkout loop without a real card: PreFlight creates a test-mode Checkout session, verifies webhook delivery, and confirms the Supabase side effect landed. Configure it on the Stripe integration and run it from Checks or CI. See Verify Stripe Checkout without a card.

Watchdogs

Watchdogs sample health after a check passes. Use them in order: full check → 24-hour Monitoring → Sentinel.

24-hour Monitoring

24-hour Monitoring (/dashboard/health) is a time-boxed release-window watcher. Start it before a launch or immediately after a risky deploy. It samples the health endpoint and connected providers with denser cadence, routes alerts on repeated failures, and completes automatically after 24 hours.

See Uptime Monitoring.

Uptime Monitor

Uptime Monitor (/dashboard/sentinel) is always-on production sampling. Each project can be enabled, paused, assigned a cadence, and given a failure threshold. It catches drift after the launch window closes.

Vercel Watch

Vercel Watch (/dashboard/vercel-watch) continuously verifies connected Vercel projects: production deployment status, domain drift, and environment parity before users notice.

Payment Sync

Payment Sync (/dashboard/revenue-watch) reconciles paid Stripe Checkout sessions against Supabase side effects configured for shadow checks. It surfaces silent payment drift when webhooks fail or write to the wrong table.

See Payment Sync.

Data Integrity Guard

Data Integrity Guard (/dashboard/backups) captures a metadata-only baseline of your Supabase database, detects paused projects, dropped tables, and collapsed row counts, then runs a read-only integrity drill. It does not claim that a provider backup is restorable.

Readiness and Custom Checks

Full audit (/dashboard/audit) focuses on the saved app URL and launch probes in one view. Custom Checks (/dashboard/custom-checks) let you schedule your own HTTP assertions on the monitoring cron cadence.

Operations

Issues

Issues (/dashboard/issues) combines failed uptime incidents, active audit fixes, and privacy-safe runtime threat signals in one response queue. Each item follows the same loop: understand impact, take ownership, fix it, then verify fresh evidence before closure.

Recovery Guides

Recovery Guides (/dashboard/runbooks) map failed and warning probes to rule-based recovery steps with verification instructions and docs links. Each row explains why the probe failed, where to check, and how to confirm recovery.

Release Rules

Release Rules (/dashboard/deploy-gates) expose hard pass/fail release checks for CI and Vercel. Gates can require clean checks, active Uptime Monitoring, clean Payment Sync, Database Change Check, and provider health.

See Release Rules.

Provider SLA

Provider SLA (/dashboard/provider-sla) summarizes seven-day reliability per integration: pass rate, warning rate, failure count, average latency, and most recent check time.

Incident Event Timeline

History & Audits (/dashboard/activity) is the Event Timeline timeline: checks, deploys, provider events, revenue snapshots, alerts, and settings changes correlated into a replayable audit trail.

API Keys & Security

API Keys & Security (/dashboard/api-security) inventories active API keys, rejected boundary events, forged Shield reports, and durable rate-limit buckets.

Supabase Database Change Check

Database Change Check lives under Guardrails on each project and in the global guardrails view. It detects when a Supabase migration diverges from the deployed app and can block releases through Release Rules.

Alerts and evidence

Alert Routing

Alerts (/dashboard/alerts) shows delivery history for Slack, Discord, email, PagerDuty, OpsGenie, Microsoft Teams, and generic webhooks. Confirm whether a message was sent, failed, bounced, or skipped by notification preferences.

Reports and exports

Exports (/dashboard/exports) produces PDF, CSV, JSON, and expiring share links backed by stored check runs — auditor-friendly evidence without credentials or raw webhook payloads.

Trust Center

Trust Center is project-scoped customer-facing evidence at /dashboard/projects/:id/trust-center. Publish health summaries and uptime without exposing provider secrets.

See Trust Center.

Configuration

Providers

Providers (/dashboard/providers) is where you connect Stripe, Supabase, Clerk, Vercel, Resend, and the rest of the integration catalog. Each connection stores encrypted credentials and drives the provider probe suite.

Account API + GitHub guardrails

Settings → API keys creates account-scoped keys (pf_live_…) for CI automation: trigger checks, read gate state, and ship reports from your pipeline. See API overview.

Settings

Settings manages workspace team invites, alert channels, API keys, on-call routing, password reset, and restricted destructive actions.

Recommended audit flow

When debugging a launch issue, follow this sequence:

Open Fix list. In Checks, filter to failed and warning probes only. Clear failures first. Failed probes block strict Release Rules and should open a recovery guide. Read the probe message. Each row includes response time, safe error code, and fix suggestion. Apply the fix and rerun. Run the full check again — partial reruns are available for individual providers. Check downstream surfaces. If the issue affects release automation, review Uptime Monitoring, Payment Sync, Vercel Watch, and Release Rules. Export or publish. Generate an export or Trust Center report once the result is clean enough to share. Use **App URL checks** for DNS, SSL, legal pages, and secret leaks in public bundles. Use **Provider checks** for credentials, webhooks, callbacks, and API permissions.

Product surface reference

Every shipping module in PreFlight maps to a dashboard route:

| Module | Dashboard | Tagline | | --- | --- | --- | | Pre-Flight Checks | Checks | One run, every fragile path validated | | Continuous Uptime Monitoring | Uptime Monitoring | Always-on health sampling | | 24-hour Monitoring | Monitoring | Dense sampling during launch week | | Issues | Issues | Incidents, audit fixes, and threat signals in one verified response loop | | Vercel Watch | Vercel Watch | Deployments and domains, continuously verified | | Payment Sync | Payment Sync | Stripe to Supabase, reconciled | | Stripe Shadow Check | Checks + Stripe integration | Full checkout loop without a real card | | Data Integrity Guard | Data integrity | Independent metadata baseline and read-only integrity drill | | Release Rules | Release Rules | CI and Vercel release blocking | | API Security Center | API Security | Keys, boundaries, and rate limits | | Secret Drift Scanner | App URL checks | Find leaked keys before launch traffic | | Provider SLA | Provider SLA | Seven-day pass rate per integration | | Incident Event Timeline | History & Audits | Persisted timeline, every release | | Deterministic Recovery Guides | Recovery Guides | Fix guidance that stays inside facts | | AI Launch Review | Checks → AI diagnosis | Optional model assist on probe data | | Alert Routing | Alerts | Slack, Discord, and email channels | | Trust Center | Project → Trust Center | Customer-facing health evidence | | Reports and exports | Exports | PDF, CSV, JSON, and share links | | Webhook diagnostics | Provider checks | Signature/handshake verification and delivery checks | | Supabase Database Change Check | Guardrails | Catch migration drift before it ships | | Account API | Settings → API keys | Stable endpoints for CI automation |

<RelatedLinks links={[ { href: "/docs/getting-started/quick-start", title: "Quick start", description: "From empty workspace to first check in fifteen minutes." }, { href: "/docs/guides/monitoring-and-sentinel", title: "Uptime Monitoring", description: "Launch window vs always-on coverage." }, { href: "/docs/guides/deploy-gates", title: "Release Rules", description: "Turn evidence into CI release blockers." }, { href: "/docs/guides/fixing-common-failures", title: "Fixing common failures", description: "Stripe, Supabase, Clerk, and environment patterns." }, ]} />