← Back to browse

Lumeforms

lumeforms uses a multi-pass analysis flow to transform nuanced text responses into high quality ai analysis tailored for your specific use case and goals. No more manually sifting through responses. Delegate it to lumeforms.

Productivity
United States Estimated origin: United States

Added April 12, 2026 · Last analysed April 12, 2026 · via Hacker News · 56% unique tagline

Own this Launch?
Screenshot of Lumeforms

StackScope is a free public catalogue of indie launches. We find launches on Product Hunt, Hacker News and similar feeds, then crawl each site to detect its tech stack and score it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 12 April 2026; the live site may have changed since.

Lumeforms ships with the launch fundamentals in place, with complete legal pages, a thorough launch checklist, and clean crawl signals. What needs work: no Content-Security-Policy, tracking cookies set before any opt-in, and incomplete email security.

Launched on Hacker News on April 3, 2026. The site is hosted on Vercel, with a domain registered 4 months before launch. The crawl picked up 14 technologies on this site, covering business email, analytics, baas, and CSS frameworks. The stack includes Next.js, React, and Tailwind CSS.

For context, it's running the same core stack as 10,661 other launches and tighter on security headers than most Hacker News launches.

If you own this site, refresh the snapshot and see the full fix list any time →

9.2
StackScope Score
Excellent
88/100 Launch Readiness
Launch ready
5/6 Security Headers
Strong
3/3* Legal
Complete*
2/2 Crawl files
Complete
Vibe Score 0 · No AI signals
How much the site looks AI-generated. Informational pattern-match signal, not a verdict. Does not feed the StackScope Score. See which fingerprints fired →

Tech Stack (14) · Indie stack

Infrastructure
DNS Namecheap DNS
Hosting Vercel (2)
Security HSTS (2)
Email
Business email Google Workspace
Zoho Mail (2)
Transactional email Firebase Trigger Email
Build & Framework
BaaS Firebase
CSS framework Tailwind CSS
Font Google Fonts
Framework React
Meta-framework Next.js (2)
UI library shadcn/ui
Analytics & Marketing
Analytics Google Analytics (2)
SEO Google Search Console

Infrastructure

Network
AMAZON-02 - Amazon.com, Inc., US
AS16509 · US
DNS
Namecheap DNS
Authoritative nameserver
DNSSEC
Not enabled
DNS responses unsigned. Cache-poisoning vulnerable.
SSL Certificate
Let's Encrypt
Valid 10 Mar 2026 to 8 Jun 2026
Certificate as captured in this snapshot, not a live check.
Domain Age
8 months
Registered Nov 2025 · NameCheap, Inc.

Email Security

✓
SPF ~all Soft-fail (~all). Common and accepted.
?
DKIM Not detected at common selectors. Your provider may use a custom one.
✗
DMARC p=none None (p=none). Monitoring only.
?
MTA-STS Not deployed. Mail to your domain can be downgraded to plaintext en route.
?
TLS-RPT Not configured. You won't hear about silent SMTP TLS handshake failures.

Readiness Breakdown How?

⚠
Custom title and meta description (partial) missing custom <title>
✓ Open Graph tags (title, image, description)
✓ Twitter card meta tags
✓ Canonical URL declared
✓ Responsive viewport meta tag
✓ Favicon present
✓ Semantic HTML (nav, main, article)
⚠
Meta description is 224 characters (advisory) Google only shows about 155–160 characters of the description in desktop search results (less on mobile); anything past that won't appear.

AI Stance

Welcomes AI crawlers
✓ llms.txt published
✓ No AI bots blocked in robots.txt
Content-Signal
? No directive declared
Link headers
? None advertised

Well-Known Files

✓ robots.txt
✓ sitemap.xml (1 URLs)
✗ security.txt
✓ llms.txt
✗ ads.txt
✗ humans.txt

Legal

✓ Privacy Policy
/privacy
✓ Terms of Service
/terms
? Consent manager not detected
Analytics set tracking cookies on our visit, with no opt-in step.
86% unique
Mentions:
Cookies Do Not Sell Updated: April 28, 2026

Security Headers (5/6)

✓
Referrer-Policy
✓
X-Frame-Options
✓
Permissions-Policy experimental (check browser support)
✓
X-Content-Type-Options
✗
Content-Security-Policy
✓
Strict-Transport-Security
–
X-XSS-Protection deprecated (use Content-Security-Policy)

Performance

742ms response time
Faster than 19% of sites
4 third-party domains loaded

Build

✓ Code splitting
32 JS files
1 CSS files
4 Third-party domains
Something not look right? If a technology shown here is wrong or out of date, email [email protected] and we'll review it.