CI/Lock
CI/lock collects trusted telemetry across every checkpoint between commit and production — CI/CD builds, security scans (SAST/DAST/SBOM), runtime + cluster integrity (Falco, Linkerd mTLS, kube-bench), and continuous compliance (CSPM, FIPS, STIG). Signed as in-toto evidence for FedRAMP 20x, the EU Cy...
StackScope is a free public catalogue of indie launches. We find launches on Product Hunt, Hacker News and similar feeds, then crawl each site to detect its tech stack and score it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 30 June 2026; the live site may have changed since.
CI/Lock scores highly overall, with a thorough launch checklist and clean crawl signals. Main gaps: missing Content-Security-Policy and Strict-Transport-Security, incomplete legal pages, and incomplete email security.
Launched on Hacker News on June 30, 2026. The site is served through Cloudflare, with a domain registered 4 months before launch. Our crawler found 4 technologies on this site, covering CDN, DNS providers, meta-frameworks, and protocol. The stack includes Docusaurus, Cloudflare, and Cloudflare DNS.
It's also one of just 20 launches we've crawled on this exact stack and more locked down than the typical Hacker News launch.
If you own this site, refresh the snapshot and see the full fix list any time →
Tech Stack (4)
| CDN |
Cloudflare
|
| DNS |
Cloudflare DNS
|
| Protocol | HTTP/3 |
| Meta-framework |
Docusaurus
(2)
|
Infrastructure
Email Security
Storage (1)
| Name | Lifetime | Detected as |
|---|---|---|
| cf_country | 1h | - |
Readiness Breakdown How?
Performance How?
⚠ 1 images: 1 oversized, 1 without width/height
Indicative grade from a single automated render, not a substitute for Lighthouse or field data, and not part of the StackScope score.
Vibe Score Breakdown How?
| Signal | Points |
|---|---|
| Placeholder branding | +10 |
| AI copy signals | +5 |
| AI palette signals | +5 |
| AI writing signals | +5 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.