← Back to browse

Devpost

Diff Forge lets developers direct Codex, Claude Code and OpenCode in parallel by voice, vision and workflows, with a local safety kernel and secure control from any device—while your code stays local.

AI
United States Estimated origin: United States

Added July 21, 2026 · Last analysed July 21, 2026 · via Hacker News · 67% unique tagline

StackScope is a free public catalogue of indie launches. We find launches on Product Hunt, Hacker News and similar feeds, then crawl each site to detect its tech stack and score it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 21 July 2026; the live site may have changed since.

Devpost is largely in shape, with complete legal pages and a thorough launch checklist. Main gaps: missing several security headers, no sitemap, and incomplete email security.

Launched on Hacker News on July 21, 2026. The site is hosted on AWS ALB, with a domain registered in 2006. The crawl picked up 36 technologies on this site, covering javascript library, analytics, email marketing, and advertising. The stack includes Civic Cookie Control, AddThis, and AWS ALB.

For context, it's one of just 24 launches we've crawled on this exact stack.

If you own this site, refresh the snapshot and see the full fix list any time →

Vibe Score 21 · Few AI signals
How much the site looks AI-generated. Informational pattern-match signal, not a verdict. Does not feed the StackScope Score. See which fingerprints fired →

Tech Stack (36)

Infrastructure
DNS easyDNS
Hosting AWS ALB
Security AWS WAF (4)
HSTS
Server nginx
Email
Business email Google Workspace (3)
Email marketing HubSpot
Mailchimp (2)
Outfunnel
Transactional email Postmark
Build & Framework
Font Font Awesome Pro
Icon font Font Awesome
JavaScript library Backbone.js
clipboard.js
Infinite Scroll
jQuery
Luxon
MathJax
Modernizr
PrismJS
Select2 medium
Package CDN jsDelivr
Video YouTube (3)
Analytics & Marketing
Advertising Facebook Pixel
Google Ads
Analytics Google Analytics (4)
Mixpanel (3)
New Relic
Consent Civic Cookie Control
SEO Google Search Console
Social AddThis
Facebook SDK medium
Tag management Google Tag Manager (4)
Business Tools
Chat Zendesk
Error tracking Honeybadger
Other
Backend framework Rails

Infrastructure

Network
AS16509 · US
DNS
easyDNS
Authoritative nameserver
DNSSEC
Not enabled
DNS responses unsigned. Cache-poisoning vulnerable.
Green hosting
Not green hosted
No green-energy record. Data from The Green Web Foundation.
SSL Certificate
Sectigo Limited
Valid 3 Sep 2025 to 4 Oct 2026
Certificate as captured in this snapshot, not a live check.
Domain Age
20.1 years
Registered Jun 2006 · GoDaddy.com, LLC

Email Security

SPF ~all Soft-fail (~all). Common and accepted.
DKIM Detected via known email provider
DMARC p=none None (p=none). Monitoring only.
?
MTA-STS Not deployed. Mail to your domain can be downgraded to plaintext en route.
?
TLS-RPT Not configured. You won't hear about silent SMTP TLS handshake failures.

Storage (20)

Cookies (12)
NameLifetimeDetected as
aws-waf-token 3d AWS WAF
AWSALB 6d AWS ALB
AWSALBCORS 6d AWS ALB
CookieControl 2mo -
VISITOR_INFO1_LIVE 5mo YouTube
VISITOR_PRIVACY_METADATA 5mo YouTube
YSC session -
_devpost session -
_ga_0YHJK3Y10M 1y Google Analytics
__mp_opt_in_out_1c828346e9fae00dbc3a117657f65895 12mo -
__Secure-ROLLOUT_TOKEN 5mo -
__Secure-YNID 5mo YouTube
Local storage (5)
KeySizeDetected as
awswaf_session_storage 570 B AWS WAF
awswaf_token_refresh_timestamp 13 B AWS WAF
aws_waf_referrer 4 B AWS WAF
aws_waf_token_challenge_attempts 51 B AWS WAF
_gcl_ls 277 B Google Ads
Session storage (2)
KeySizeDetected as
mp_gen_new_tab_id_mixpanel_1c828346e9fae00dbc3a117657f65895 1 B Mixpanel
mp_tab_id_mixpanel_1c828346e9fae00dbc3a117657f65895 41 B Mixpanel
IndexedDB (1)
DatabaseVersionDetected as
mixpanelFlagsDb 1 Mixpanel

Readiness Breakdown How?

Custom title and meta description
Open Graph tags (title, image, description)
Twitter card meta tags
Responsive viewport meta tag
Favicon present
Semantic HTML (nav, main, article)
- Canonical URL declared

Performance How?

651 ms Server response
24% Faster than peers
1368 ms Largest contentful paint
0.02 Cumulative layout shift
6.7 MB Page weight
1.2 MB Image weight
13 Third-party domains
0 Console errors
0 Failed requests

34 images: 4 oversized, 34 without width/height, 1 missing alt text

Indicative grade from a single automated render, not a substitute for Lighthouse or field data, and not part of the StackScope score.

Vibe Score Breakdown How?

SignalPoints
AI palette signals +5
AI writing signals +3
AI iconography signals +3
Unfilled template placeholders +10

This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.

AI Stance

Blocks AI crawlers
llms.txt published
9 AI bots blocked in robots.txt
? No directive declared
? None advertised

Well-Known Files

robots.txt
sitemap.xml
security.txt
llms.txt
ads.txt
humans.txt
Privacy Policy
/legal/california-consumer-privacy-act
Terms of Service
/legal/terms-of-service
Consent manager: Civic Cookie Control
88% unique

Security Headers (3/6)

Permissions-Policy experimental (check browser support)
X-XSS-Protection deprecated (use Content-Security-Policy)

Build

Code splitting
18 JS files
2 CSS files
13 Third-party domains

Brand Colours

Something not look right? If a technology shown here is wrong or out of date, email [email protected] and we'll review it.