ProdPilotDocs
ProdPilot

For Node.js with Express and React with Vite

It works on localhost. That was never the question.

Audit your AI-built app against 50 production rules, fix it with the agent already in your editor, and deploy only what passes.

pip install prodpilot
Start the quickstart View on GitHub
A recorded ProdPilot run on the sample project node_express_insecure. The audit scored it 13 out of 100, with22 rules failing, 6 of them critical. The verifier confirmed18 fixes, 2 more rules passed once other fixes created the files they check, and 3 were left for manual review. The project finished at 96, Production Ready, and the gate said: score 96 meets the threshold of 90 with no critical failures, and the model estimates a 82% chance of deploying, at or above its operating point of 37%.

The gap

Six things localhost never checks

Your laptop fills them in. A real server does not.

How it works

Five steps, always in this order

  1. Step 0: Detect

    Names your stack and loads its production blueprint.

  2. Step 1: Audit

    Scores the project against its rules, from 0 to 100.

  3. Step 2: Fix

    Your agent writes each fix. ProdPilot re-checks it.

  4. Step 3: Gate

    Opens only at 90 or more, with no critical failure.

  5. Step 4: Ship

    Deploys to Render, smoke tests it, wires CI/CD.

How each step works

Proof

Measured, not claimed

Every figure links to where it was measured.

production rules checked
50
Source: Rule catalog
of rules fixed with no model writing code, 44 of 50
88%
Source: Metrics
real Render deployments behind the gate's model
684
Source: Evaluation
tests at 1.1.0; the suite passes on Linux, macOS and Windows
2,012
Source: Contributing

Verified inVS CodeCursorWindsurf, now DevinCompatibility record

Live demoprodpilot-demo.onrender.com

  • GET /200
  • GET /health200
  • GET /api/v1200

Captured 2026-09-25.

Honest limits

What it does not do

All known limitations

Get started

Three commands

  1. pip install prodpilot
  2. prodpilot setup
  3. prodpilot connect vscode

Or connect cursor, or connect devin --project PATH. Then ask your agent to audit the project. Quickstart

$ prodpilot doctor
ProdPilot doctor

Config file: ~/.prodpilot/config.toml
  found
  github_token: stored
  render_api_key: stored
  permissions: access is limited to the current user

Tools ProdPilot runs:
  git: git version 2.54.0.windows.1
  Node.js: v26.3.0
  Docker: daemon 29.7.2

All checks passed.
Real output, ProdPilot 1.1.0, 10 October 2026. Home directory shown as ~.