Software Pre-Launch Checklist
A comprehensive checklist to verify DNS, SSL, secrets, backups, support, legal, billing, and live production readiness before launching a product.
1. Product & Core Value Readiness
Ensure the primary user workflow and value proposition are fully functional.
2. Domain, DNS, SSL & CDN Configuration
Verify domain resolution, auto-renewing SSL/TLS certificates, and CDN caching.
3. Environment Variables, Secrets & Config
Verify production configuration keys, secret vault isolation, and debug flags.
4. Authentication, Billing & Onboarding
Validate user identity management, live payment processing, and transactional email.
5. Infrastructure & Database Backups
Ensure automated database snapshots, connection pooling, and auto-scaling rules.
6. Observability, Error Tracking & Analytics
Set up error monitoring, APM performance metrics, and analytics event logging.
7. Support, Help Center & Feedback Channels
Provide clear channels for users to report bugs, request help, and submit feedback.
8. Legal, Privacy & Compliance
Publish legally required Terms of Service, Privacy Policy, and cookie disclosures.
9. Marketing, Store Listing & Launch Comms
Prepare social cards, store metadata, press materials, and launch announcements.
10. Pre-Launch Production Verification
Perform end-to-end smoke testing directly on the live production URL.
11. Live Launch Day Execution & Contingency
Assign launch leads, open monitoring bridges, and verify emergency rollback paths.
Tailoring Launch Checks by Product Architecture
Different software architectures carry distinct pre-launch risks. Use the Product Type selector to focus on requirements relevant to your stack:
Focus on live payment gateway webhooks (Stripe Live Mode), production OAuth redirect URIs, transactional email delivery (SPF/DKIM/DMARC), and automated database backups with PITR.
Focus on rate limiting middleware (HTTP 429), API key generation/rotation policies, OpenAPI documentation accuracy, SDK backward compatibility, and SLA status monitoring.
Focus on App Store & Google Play review approval status, push notification APNS/FCM certificates, deep linking universal links, and forced app update shims.
Focus on custom domain CNAME/A records, auto-renewing SSL/TLS certificates, WWW vs non-WWW redirects, OpenGraph social card previews, and CDN edge purge rules.
Launch Day Emergency Abort Runbook
If unexpected traffic spikes or database failures occur during launch hours, execute the emergency contingency protocol:
1. Single-Click Rollback
Keep your Vercel/AWS deployment console open to execute an instant deployment rollback if live error rates spike above 1%.
2. Feature Killswitches
Use feature flags to disable heavy background syncs, AI generation workers, or expensive search queries to shed database CPU load.
3. Live War Room Bridge
Establish a dedicated launch day war room (Slack channel or video call) with designated engineering, support, and marketing leads.
When to Use This Checklist
- In the final 72 hours before launching a new SaaS product, mobile app, API, or major web service.
- To verify custom domain DNS, SSL certificates, environment variables, and live payment processing.
- When auditing backup schedules, legal terms, privacy policies, and support escalation paths.
- To run live production smoke tests before publishing to Product Hunt, App Store, or HN.
Common Pitfalls to Avoid
- Leaving Stripe or payment gateways in Test mode, preventing real users from subscribing.
- Using staging environment variables or test API keys in production deployment settings.
- Forgetting to configure automated database backups with Point-In-Time Recovery (PITR).
- Launching without a clear support contact or incident escalation path when early traffic spikes.
- Assuming a successful staging deployment guarantees production readiness without live URL smoke testing.
Connected Workflows & Tools
Complementary prompts, agent skills, and interactive tools in SprintKit.
Production Deployment Checklist
Pre-flight checks and live telemetry verification for shipping services.
Security Review Checklist
Risk-based security audit for auth, authorization, injection, and secrets.
API Release Checklist
Ensure contract stability and zero breaking changes when shipping APIs.
Incident Response Checklist
High-pressure incident runbook for triaging and mitigating outages.