Help Center

Sign in, then open Guided setup. It asks one question per screen: which builder you used, your app's development address (for example yourapp.lovable.app) and, if you have one, your live custom address (for example yourapp.com).

Your progress is saved as you go, so you can stop and come back later without starting over.

Many AI-built apps have a development address on the builder and a separate live address that customers use. They can show different versions of your app.

GuardMike watches your live address first when you have one. When you test features you pick which address to test, and every result shows exactly which address it came from.

It opens your public pages from our server and records whether they load, whether the secure connection (HTTPS) works, the page title and description, and broken links on that page. It can also run up to three test journeys you have approved.

It does not test every button, microphone or speech features, or Google and calendar connections. Those show as Untested until a real test for them runs.

Passed: a real test ran and everything it checked worked. Failed: a real test ran and found a problem. Blocked: the test could not safely run, for example because it would need a password or would send something. Untested: nothing has checked it yet.

GuardMike never shows Passed without saved proof from an actual run.

After the first check, GuardMike can open your app in a real browser, look around without submitting anything, and suggest features to test. You review each suggestion, say what should happen, and approve it.

Approved tests only look and click safe links. Tests that fill in forms need your separate permission and a test account — never your real customers' data.

Automatic checks are planned for Sundays and Wednesdays at 7:00 a.m. New York time. They are not switched on yet, and the app says so wherever they appear. You can run Check Everything yourself anytime.

Open your app, find Ownership & publishing, and press Verify ownership. GuardMike gives you a unique code to add as a DNS record (where you bought the domain) or as a small file on your website. Then press Check verification and we look it up.

Ticking a box or typing your address never counts as proof. Verification lasts 30 days and can be re-checked. Proving your domain does not give GuardMike access to your code.

Without a code connection GuardMike can watch and test your app, but it cannot prepare fixes. To enable prepared fixes, connect your own GitHub account in Settings and pick the repository your app syncs to.

A Lovable or Base44 address alone never gives anyone access to change your app.

No. Prepared fixes go to a separate branch in your repository and wait for your approval. Changes touching sign-in, payments, security or your database always need your OK.

Automatic publishing of small, undoable fixes stays off unless you verify your domain, connect your code with write access, and opt in yourself.

On the sign-in page press Forgot password?, enter your email, and open the link we send to choose a new one. Links work once and expire.

Open the app from My Apps and scroll to Manage this app. Removing deletes GuardMike's saved checks, tests and fixes for that app. Your real website and code are not changed.

Yes. On Android or a computer using Chrome or Edge, use the Install GuardMike button in Settings when it appears. On iPhone or iPad, open GuardMike in Safari, tap Share, then Add to Home Screen.

GuardMike needs an internet connection to work; it does not run offline.