ShipCheck is a tool that performs six predefined security checks against live, deployed applications built with AI assistance. Its primary function is to identify common vulnerabilities that frequently appear in AI-generated code, such as exposed database access, unprotected API endpoints, and insecure payment handling. Unlike static code analysis or traditional security scanners, ShipCheck interacts with the running application as a user would, testing for issues that only become apparent when the app is live and handling real traffic. The tool examines six specific areas: whether anonymous users can access private data; whether one authenticated user can read another user's data; whether AI or paid API endpoints lack rate limiting and could generate unexpected costs; whether payment webhooks can be forged to grant free access; whether the app provides proper metadata for social sharing and has standard security headers; and whether any integrated AI can be tricked into violating its rules or leaking information. For each issue found, ShipCheck produces redacted proof of the vulnerability, creates a fix on a separate branch, and generates proof that the fix resolves the problem. ShipCheck operates as a plugin for Claude Code and requires a live, deployed URL to run. It supports Supabase and Stripe as best-tested stacks, and will report "not verified" for stacks it cannot properly assess rather than providing a false all-clear. Ownership of the tested application is confirmed with each run to prevent scanning of third-party sites. The tool outputs reports that can be viewed as local files or posted directly to GitHub or GitLab as issues. Typical use cases include pre-launch verification for AI-built applications, regression testing before major updates, and integration into a development workflow that includes brief writing, implementation, review, and merge request stages. ShipCheck is offered with unlimited runs across all applications a user owns, includes 12 months of updates, and comes with a 14-day money-back guarantee.