Lovable · Bolt · Replit · Vercel · Netlify
You shipped in a weekend. Your headers didn't.
AI app builders get you live fast, but most deploy with zero security headers. Scan your app, then paste one config block for your host.
Vercel
One vercel.json block adds every header.
Netlify
Drop a _headers file in your public folder.
Lovable / TanStack
Wrap responses in src/server.ts — snippet included.
Guides: CSP on Vercel · HSTS on Netlify · X-Frame-Options on Lovable