{"slug": "what-actually-breaks-when-you-deploy-an-ai-built-app", "title": "What actually breaks when you deploy an AI-built app", "summary": "A developer audited 20 AI-built apps from tools like Lovable, Bolt, v0, and Cursor, finding that 14 had canonical tags pointing to the wrong domain, 12 had broken SEO, 9 had analytics not firing, 7 had no contact method, 5 had open databases, and 2 had secret keys in client bundles. The developer warns that AI tools are judged on whether apps run, not on what a real browser loads at the real domain, and that any redeploy can reintroduce these issues.", "body_md": "I ran launch audits on **20 AI-built apps**, **Lovable**, **Bolt**, **v0**, a couple of Cursor builds. Same checks on each, run against the live deployed URL, not the code. These were the most common problems:\n\n**14/20** had a canonical tag pointing at the wrong domain. Usually the builder's preview URL. The site works fine on the custom domain, but it's telling Google the real version lives at something.lovable.app.\n\nYour domain never ranks and you'd never know why.\n\n**12/20** had broken or missing basic SEO. No meta description, no OG image (so every shared link is a grey rectangle), or a sitemap listing pages that 404.\n\n**9/20** had analytics installed but not firing. Added early, then the AI rewrote the layout and dropped the snippet, or it fires on the homepage and nowhere else. Traffic arrives, you learn nothing.\n\n**7/20** had no way for anyone to contact them. No email, no form, nothing. Someone wants to pay you and can't tell you.\n\n**5/20** had an open database. Row level security off, so the anon key that ships in the bundle can read whatever it wants. This is the scary one and it takes 30 seconds to check.\n\n**2/20** had an actual secret key in the client bundle. Pasted in at 2am to make something work, then shipped to every visitor's browser.\n\nAnd the one that applied to all 20: *nothing* was watching any of this.\n\n**Every prompt is a redeploy, and any redeploy can reintroduce all of the above.**\n\nYour app doesn't email you when its meta description disappears.\n\nNone of these are exotic. The AI tools are **judged on whether the app runs**, so that's what they're good at. Nobody's judging what a real browser actually loads at your real domain, and that gap is where launches die quietly.\n\n*I found all of this* with a tool I'm building called Actuant ([https://www.actuant.dev](https://www.actuant.dev)), it audits your deployed app in a cloud browser and watches it after you ship.\n\nJoin the waitlist ([https://www.actuant.dev/early-access](https://www.actuant.dev/early-access)) if you want it on your app.", "url": "https://wpnews.pro/news/what-actually-breaks-when-you-deploy-an-ai-built-app", "canonical_source": "https://dev.to/actuant/what-actually-happens-when-you-ship-an-ai-built-app-50f3", "published_at": "2026-07-24 12:04:15+00:00", "updated_at": "2026-07-24 12:33:06.912236+00:00", "lang": "en", "topics": ["ai-tools", "developer-tools", "ai-products"], "entities": ["Lovable", "Bolt", "v0", "Cursor", "Actuant"], "alternates": {"html": "https://wpnews.pro/news/what-actually-breaks-when-you-deploy-an-ai-built-app", "markdown": "https://wpnews.pro/news/what-actually-breaks-when-you-deploy-an-ai-built-app.md", "text": "https://wpnews.pro/news/what-actually-breaks-when-you-deploy-an-ai-built-app.txt", "jsonld": "https://wpnews.pro/news/what-actually-breaks-when-you-deploy-an-ai-built-app.jsonld"}}