NewPreviews are checked before you publish

You build. We keep watch.

Keelnest watches your app’s payments, releases and running costs — and when something breaks, explains why in plain English and hands you the fix: a pull request to approve, or a prompt for your builder.

  • Free for your first app
  • No credit card
  • Nothing changes without you

Made for apps built with

  • Lovable
  • Bolt
  • Cursor
  • Claude Code
  • Replit
  • v0

Keelnest reads from Stripe, Supabase, Vercel, Netlify, Cloudflare, OpenAI, Anthropic, Sentry and GitHub.

The guards

Three guards. One calm place.

Money, releases and running costs — watched against your app’s own history, explained in plain English, and never touched.

Revenue Guard

Notice when payments go quiet.

Every hour of payments against the same hour of your own week, so a checkout that stops taking money is noticed while it still matters — with the evidence and the estimate side by side.

Publish Verification

A verdict on every release.

Within five minutes of every publish, the journeys your customers rely on are walked in a real browser and the configuration is read. You see what passed, what failed, and what changed.

Netlify · c3a91f7 · Verdant Shop
  • HTTP and SSL200 in 380 ms
  • Login journey4 steps in 18 s
  • Checkout journey7 steps in 44 s
  • Env var presenceAll 11 keys present
  • Redirect URLsProduction domain allowed
  • Security headersPresent
VerifiedEvery check passed at 13:13
Cost Guard

Keep the ambition. Watch the spend.

AI usage and hosting against a budget you set per app, read every hour — a runaway loop is noticed in hours, not on next month's invoice.

Backend & email

The backend, and the email it sends.

Supabase health, read-only mode and its security advisors — and whether your sign-up and password-reset emails can actually arrive.

  • DatabaseHealthy
  • AuthHealthy
  • WritesAccepted
  • Row level securityNo findings
  • Auth emailBuilt-in mailer

Illustrative. The built-in mailer is Supabase’s development sender, capped at a few emails an hour.

Previews

Checked before you publish.

Every branch and pull-request preview on Vercel and Netlify gets the site check and the app's journeys — so a broken checkout is caught while it is still a branch.

  • feat/checkout-copyBreaks checkout
  • fix/footer-linksSafe to publish

Illustrative branches. A preview never opens an incident: it is not your customers’ site.

Every five minutes, on every plan.

HTTP, SSL and security headers, never metered — and a 404 or a 401 explained in the words your visitor would use.

From alert to fix

Plain English. Then the fix, ready to approve.

Every alert says what happened, what it costs and the evidence. A code fix arrives as a pull request, checked on a preview and merged only when you approve; a setting comes with steps and a prompt for your builder.

Sample alerts from the demo workspace. Nothing here is connected to a live account.

CriticalINC-2041 · Maison Store

Customers cannot pay: no payments for 4 hours

The publish on 9 September removed the Stripe webhook secret. Stripe could not verify its messages, retried for three days, then turned the endpoint off this morning. Orders now stop at the payment step because the app waits for a confirmation that never arrives.

Estimated revenue at risk$1,24022 expected payments × $56 average order. An estimate, labelled as one — not confirmed lost revenue.
The evidence
  • Checkout journey failed at step 4 of 7: 'Checkout'
  • Stripe disabled webhook endpoint we_1Qx…9Kp
  • 0 payments 10:00 to 14:00; expected about 22

First step. Approve the prepared fix (restores the secret and adds a clearer error), then re-enable the endpoint in Stripe > Developers > Webhooks.

Prepared fix Verified on preview

Restore STRIPE_WEBHOOK_SECRET and fail loudly when it is missing

PR #212 · keelnest/fix-inc-20413 files · +28 −2

  • app/api/stripe/webhook/route.ts+9 −2
  • vercel.json+1
  • tests/stripe-webhook.test.ts+18
Checked on the Vercel preview
  • Preview deployReady
  • HTTP and SSL on preview200 in 310 ms
  • Browser journeys on preview2 of 2 passed
  • Build on the repository's CIPassed
  • Tests on the repository's CIMissing coverage

High risk · touches the payments path

Merges 4c7f1a2 only, the commit that was checked.
Rather make it in Lovable? Use the prompt instead
Prompt for Lovable

In my Lovable project, the Stripe webhook secret is missing from the production environment. Add STRIPE_WEBHOOK_SECRET back to the Vercel production env vars and make the /api/stripe/webhook route return a clear 400 with the message 'webhook secret not configured' when it is missing, instead of failing silently.

After you approve

  1. Keelnest merges 4c7f1a2 on GitHub — nothing else.
  2. Vercel publishes it, and the checks run again on the new revision.
  3. INC-2041 closes once the check that opened it passes.

How it works

From live app to looked-after app.

Start with your app’s address. Connect what you use, choose what matters, and get back to building.

  1. Bring your app.

    Add the address you already ship to. Uptime, SSL and headers are watched from the first minute.

    maison-store.comWatching
  2. Connect your tools.

    Link Stripe, Supabase and your host, read-only wherever the provider allows it. Keelnest only ever reads with them.

    Stripe · restricted keyRead-only
  3. Pick key journeys.

    Choose the paths your customers depend on — signing in, reaching checkout — and they are walked in a real browser.

    Open → Sign in → CheckoutNo charge
  4. Keep creating.

    Every publish is verified within five minutes. You hear from Keelnest only when something needs you — and the fix comes with it.

    Vercel deploysEvery publish

Trust

Nothing changes without you.

Keelnest reads what it needs and changes nothing on its own. Here is exactly what that means for the keys you connect.

How we handle your data
  • Fixes wait for you

    A fix arrives as a pull request on a branch of its own, checked on a preview where your host builds one. Nothing reaches your live app until you approve it.

  • Read-only everywhere else

    Stripe restricted keys, read scopes over OAuth, admin and management keys used only to read usage, cost and, after a leak, your key list. Keelnest never edits a setting or an environment variable, or runs a migration.

  • Encrypted and revocable

    Every credential is encrypted at rest and can be revoked at the provider whenever you like.

  • Money is never touched

    No refunds, charges or price changes, ever. A payment journey stops before the pay step, and Keelnest stores no test card.

For agencies

Every client app on one desk.

You look after the client. Keelnest looks after their apps — the whole portfolio in view, and a report each month that carries your name.

  • Response targets on the clockPer client, per maintenance plan, counted in their business hours.
  • Reports that carry your nameMonthly and white-label: money, publishes and spend, shared through a portal link.
  • Roles for the whole teamOwner, admin, engineer, support and viewer — and guests who only see their own client.
Portfolio17 apps · 9 clients
  • Maison Store · Maison ParisCritical
  • Orbit CRM · Orbit SoftwareUnknown
  • Lumara Booking · Lumara PilatesCritical
  • Atlas AI Writer · Atlas LabsDegraded
  • Lumen Portal · Lumen HealthDegraded
  • Kite Invoices · Kite FinanceDegraded
Brightline StudioMonthly report

Verdant Goods · August 2026

Journeys
5,944 of 5,952 passed
Money
at baseline 31 of 31 days
Publishes
8 of 9 verified
Response
2 of 2 on time
PublishedShared via portal

Pricing

Start small. Grow from here.

Your first app has a home here for free. Choose more coverage as your apps, your ambition or your team grow.

Free

Try it on one app

$0/month

No card needed

1 app · weekly + after publish

Start free
  • HTTP, SSL and headers every 5 minutes
  • One journey weekly and after publish
  • Revenue Guard with an hourly baseline
  • 3 AI explanations a month

Solo

One live app that takes payments

$19/month

Billed monthly

1 app · hourly + after publish

Start with Solo
  • Journeys hourly and after publish
  • Fixes prepared as pull requests, checked before you approve
  • Spend budgets
  • Unlimited seats
  • Your own OpenAI key
  • 20 AI explanations a month
For your studio

Studio

Small agency, white-label

$99/month

Billed monthly

20 apps · every 15 min + after publish

Start with Studio
  • 20 apps, journeys every 15 minutes
  • Clients and response targets
  • White-label reports and portal
  • Unlimited seats
  • 100 AI explanations a month

Already live?

Give your app a health check.

Data exposure, money flow and reliability basics — in a few seconds, without an account. Then keep it watched, free for your first app.

Passive checks only, on sites you own or are authorised to test.

Or watch your first app free