Methodology

AppHole Free starts with a public HTTP crawl. It fetches the homepage, follows a limited set of same-origin links (signup, login, pricing, checkout, privacy, terms, support), and probes a few obvious paths. It does not log in unless a future Pro authenticated mode is explicitly enabled with a test account you provide.

Findings are generated from observations: HTTP status, HTML, headers, link targets, copy patterns, viewport meta, form labels, and similar signals. An LLM, if configured, may rewrite plug language. It may not add holes that were not observed.

Runtime console errors, screenshots, Safari, and paid checkout require a browser worker. Until Playwright is enabled for a scan, those items are marked couldn't verify.

Dispositions exist so builders do not treat every imperfection as a launch blocker. Missing dark mode is usually not blocking a sale. Broken checkout is.