TokenTimer
TokenTimer discovers your certificates, API keys, secrets, licenses, and subscriptions, alerts the right people before they expire, and automates renewal on Linux and Windows Server. Cloud-managed SaaS or self-hosted: metadata-only security, open source on GitHub.
StackScope is a free public catalogue of indie launches. We find launches on Product Hunt, Hacker News and similar feeds, then crawl each site to detect its tech stack and score it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 18 August 2026; the live site may have changed since.
TokenTimer scores highly overall, with complete legal pages, a thorough launch checklist, and well-configured email security. Visible gaps: missing Permissions-Policy and Content-Security-Policy.
Launched on Product Hunt on August 18, 2026. The site is hosted on Infomaniak-AS - Infomaniak Network SA in Switzerland. The crawl picked up 10 technologies on this site, covering javascript library, analytics, developer tools, and DNS providers. The stack includes Chakra UI, Google Fonts, and HSTS.
For context, it's more locked down than the typical Product Hunt launch.
If you own this site, refresh the snapshot and see the full fix list any time →
Tech Stack (10)
| DNS |
|
| Security | HSTS |
| Server |
|
| Business email |
|
| Developer tools |
|
| Font |
|
| JavaScript library |
|
|
|
|
| UI library |
|
| Analytics |
|
Infrastructure
Email Security
Storage (1)
| Key | Size | Detected as |
|---|---|---|
| chakra-ui-color-mode | 5 B | Chakra UI |
Readiness Breakdown How?
Performance How?
⚠ 34 images: 34 oversized, 1 without width/height
Broken first-party requests (1), worth fixing
- 401 /api/v1/workspaces?limit=50&offset=0
Indicative grade from a single automated render, not a substitute for Lighthouse or field data, and not part of the StackScope score.
Vibe Score Breakdown How?
| Signal | Points |
|---|---|
| AI copy signals | +5 |
| AI onboarding signals | +5 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.
