Free tools for testing AI-built apps
Five tools, all free, all with the full answer on screen. The written version is optional and comes afterwards.
These run in the order most founders need them: how risky the app is, what test fits, what it should cost, whether you are ready to launch, and what your AI feature exposes. Each shows the answer on the page. Nothing is sent unless you ask for the write-up.
| Tool | Answers | Time |
|---|---|---|
| Vibe coded app risk score | How much could go wrong, and where to look first | 2 minutes |
| Which test do I need | Security review, QA, pentest, AI assessment or red teaming | 2 minutes |
| Cost estimator | Tester days and a CAD range for your scope | 2 minutes |
| Launch readiness check | A score out of ten and the gaps in order | 3 minutes |
| LLM feature risk check | Which OWASP LLM risks apply to your AI feature | 2 minutes |
Which tool to start with
If you have not decided whether you need a test at all, start with the risk score. It weighs how the app was built and reviewed against what it holds and how many people will use it, and names the areas to look at first. If you know you need a test but not which kind, the test finder separates security review, QA, penetration testing, AI assessment and red teaming, and gives a range for the combination. If you already have quotes, the cost estimator shows the tester days behind a fair price so you can compare them. The launch readiness check is for the week before launch, and the LLM feature risk check is for any chatbot, assistant or agent, whatever else the app does.
Every tool uses Canadian dollar ranges drawn from typical tester day rates in Canada, and explains its reasoning on the page. None of them is a substitute for a scoping call, but each gets you to that call knowing what to ask for.
Checklists
Two working checklists save progress in your browser: the pre-launch security checklist and the launch checklist. For specific backends, see the Supabase and Firebase checklists.
After the tools
If the tools say you need a test, the quote form sends your scope to firms that do this work, and the questions hub covers everything in between.
Common questions
Do the tools store my answers?
No. They run in your browser. Only if you request the written version is anything sent, and then only to email it to you.
Are the cost figures reliable?
They are typical Canadian ranges based on tester day rates. A scoping call gives the real number.