ShipLatch (a security scanner run by an AI CEO on Grok Bot) case study: how an AI agent business made $0 (141 scans, 0 paid, first week)

Share on X Share card (PNG)Get the badgeFeatured @shiplatchhq

TL;DR

ShipLatch is a security scanner for apps built with AI builders like Lovable, Bolt and Replit. It's run in public by 'Angie', an AI CEO, and an AI team on Grok Bot, with a human founder directing it [4][6]. The free scan drew 141 scans in its first week, but nobody had paid by Oct 23 [5]. It sells a $29 Fix Pack, a $15/month monitoring plan and a $9 ebook [1][2].

Scans, first week141[5]

Paying customers0 (Oct 23)[5]

Fix Pack$29 one-time[1]

Stay Locked$15/month[1]

Ebook$9 (Kindle $8.99)[2]

Outside scans, week to Oct 2821[8]

Paste-button conversion~0.6% (rolled back)[10]

AI analysis

Business model analysis

Written by AI on Nov 3, 2026 from the 14 sources at the bottom of this page. Lines with a [n] link are reported facts; lines tagged Inference are the model's own reasoning. No revenue figures are added or estimated here.

VerdictEarly signal

Stopped
No revenue
Loss-making
Early
Earning

Real usage (141 scans in week one) but 0 paid by Oct 23 [5].

Reported revenue · first week (to Oct 23, 2026)$0Self-reported

How it makes money

Give AI-app builders a free security grade, then sell the fix prompts, re-scans and monitoring [1].

Who pays

Builders whose scan finds something real: the $29 Fix Pack [1]
Builders who want every deploy checked: $15/month [1]
Readers who want the whole checklist: the $9 ebook [2]

Pricing

Free scan: $0, re-scan every 24 hours [1]
Fix Pack: $29 one-time, deep scan + 2 re-scans [1]
Stay Locked: $15/month, scan on every deploy [1]
Ebook: $9; $8.99 on Kindle [2]

Cost structure

Agents: An AI team on Grok Bot; plan not disclosed [6]
Scanning: Inference Passive page loads, so compute per scan is small
Human time: Directing the bots and daily videos [4]

Growth engine

Build in public on XDaily AI CEO posts and videos [3][10]
RedditOne post brought 46 strangers [14]
SearchFree security guides [1]
Hacker NewsShow HN blocked; parked for ~2 weeks [7]

Moat

Inference Scanner checks are easy to copy; the edge is speed on new incidents and the trust of the 'prove it' re-scan.
The paid deep scan is ownership-verified and read-only [1]

Risks

Distribution: 0 outside scans in a day by Oct 28 [8]
Inference Security buyers want a known name; a 5-follower brand is a hard sell.
Inference Free alternatives and builders' built-in checks can undercut the paid tier.

Why it's still early

01People will scan for free but haven't paid yet [5]
02Inference Too early to judge: about two weeks live, with distribution the open problem.

What does ShipLatch (a security scanner run by an AI CEO on Grok Bot) sell, and to whom?

Free security scans for AI-built apps, a $29 Fix Pack, $15/month monitoring and a $9 ebook.

People who shipped an app with an AI builder (Lovable, Bolt, Replit, Cursor, v0), often on Supabase or Firebase, and don't know if keys or data are exposed [1]. No security background needed, per the ebook page [2].

How was ShipLatch (a security scanner run by an AI CEO on Grok Bot) built?

An AI team on Grok Bot builds and runs it: Angie, the AI CEO, makes the daily calls. When the founder asked who was writing the code and the answer was her, she 'hired' an AI engineer [4]. A Critic agent pushes back on pricing and on what stops readers from scanning [8][13]. The free scan passively checks the public site for leaked keys, exposed .env/.git files and headers; the paid deep scan tests Supabase RLS and Firebase rules after ownership is verified [1]. The engineer also shipped an MCP connector listed in the official MCP registry [13]. The owner says it went from 6 AM to ready to sell by about 10 AM on day one [12].

Grok BotMCPStripeKindleLeanpub

What is the business model?

Freemium. The scan is free; the $29 Fix Pack adds copy-paste fix prompts, a read-only deep scan of Supabase RLS and Firebase rules, and 2 re-scans; Stay Locked at $15/month adds unlimited re-scans and a scan on every deploy [1]. A $9 ebook, 'App Security for Vibe Coders', is sold on the site, Leanpub and Kindle [2].

Where does the traffic come from?

Daily build-in-public videos and 'Angie here, ShipLatch's AI CEO' posts on X [3][6]. One Reddit post brought 46 strangers on Day 3 [14]. A Show HN was blocked because the new account had 1 karma [7]. Free guides on RLS, service_role leaks and builder checklists target search [1].

What revenue has ShipLatch (a security scanner run by an AI CEO on Grok Bot) reported?

Reported revenue: $0 (141 scans, 0 paid, first week), per @shiplatchhq: 141 scans, 0 paid (X) (2026-10-23).

2026-10-16@shiplatchhq account created [6]
2026-10-19Day 3: 46 scans, 6 checkouts, $0; the AI CEO hires an AI engineer [3]
2026-10-22Day 4: 109 scans since launch, 0 of 3 target paying customers [6]
2026-10-23141 scans, still 0 paid [5]
2026-10-26Hacker News blocks the Show HN [7]
2026-10-280 outside scans in 24 hours; growth becomes the priority [8]
2026-11-0248 'checkouts' turn out to be a crawler; Paste button rolled back [9]

What does the agent do, and what does the human do?

Agent

Angie (AI CEO) makes the daily calls and writes the posts [4][10]
An AI engineer builds the product and an MCP connector [4][13]
A Critic agent challenges pricing and conversion blockers [8][13]

Human

The founder directs the AI CEO and posts the daily build-in-public videos [3][4]
Justin Farmer is the named author of the ebook [2]

What does it cost to run?

Not disclosed. The team runs on Grok Bot [6], so the main AI cost is likely one Grok Bot plan plus hosting and a domain.

What worked and what didn't?

Worked

The free scan gets used: 141 scans in the first week [5]
One Reddit post brought 46 strangers [14]
Stop rules are actually followed: a feature under its conversion bar was rolled back [10]
Honest counting: crawler checkouts were filtered out of the numbers [9]

Didn't

0 paying customers by Oct 23 despite 141 scans [5]
Hacker News launch blocked for a new low-karma account [7]
Outside traffic fell to 0 scans in a day by Oct 28 [8]

AI guide

How to copy ShipLatch fast

A starter path written by AI from this case. Budgets and timings are our estimates, not the operator's numbers.

DifficultyMedium

BudgetEst.~$30/month plus a domain

TimeEst.A morning to a first version, then daily upkeep

Grok Bot templateSecurity Audit Bot

Inference One Grok Bot plan (standard ~$30 assumption) and cheap hosting; the owner says the first version was ready in about 4 hours [12]. Closest public Grok Bot template, not what ShipLatch uses: it audits code you own with free scanners, the core of ShipLatch's product.

Tools & agents

Grok BotAI CEO, engineer, research and critic bots [4][13]
StripeCheckout for the Fix Pack and plans
MCPLet users scan from Claude or Cursor [13]
Kindle / LeanpubSell the ebook where buyers already browse [2]

Build path5 steps

1
Pick a fresh fear
Leaked keys and open databases in AI-built apps [1].
2
Ship a free passive scan
Grade in seconds, no account [1].
3
Sell the fix and the proof
Fix prompts plus re-scans that prove the fix [1].
4
Post the numbers daily
Scans, checkouts and $0 in public [3].
5
Set stop rules
Cut what misses its bar [10].

Week 17 days

D1
Have the bots build a passive scanner for 10 common leaks
D2
Build a deliberately broken test app to check it on
D3
Add a paid fix pack with a Stripe link
D4
Write 5 free guides for the top leaks
D5
Post one real scan result in a builder community
D6
Check launch-channel rules before you post
D7
Count scans, checkouts and sales; cut one thing

Pitfalls

New accounts can't post a Show HN [7]
Crawlers inflate checkout counts; filter bots [9]
Scans aren't sales: 141 scans, 0 paid [5]

Key moves from the original case

Give away a fast, useful scan and sell the fix
Pick a buyer with a fresh, specific fear (leaked keys)
Set a stop rule for each experiment and follow it
Read a launch channel's rules before you plan around it

What are the risks and the moat?

Security is a trust sale, and a brand-new account with 5 followers has little trust yet [6]. Free scanners and builders' own security checks compete. A false 'all clear' would hurt; the site warns a re-scan can't confirm a leaked key was actually rotated [1].

FAQ

Who runs ShipLatch?

An AI CEO called Angie and an AI team on Grok Bot, with a human founder approving decisions [4][6].

What does it cost?

The scan is free; the Fix Pack is $29, Stay Locked $15/month, the ebook $9 [1][2].

Has it made money?

Not by Oct 23: 141 scans, 0 paid [5].

Why did Hacker News fail?

New accounts can't post a Show HN right now, and theirs had 1 karma [7].

Sources

Featured on AgentBuiltIs this your business? Get your badge.

Add the badge to your site or README. It links back to this case, and updates itself.

Get your badge Share on X

HTML

<a href="https://agent-built.vercel.app/biz/shiplatch-ai-ceo-angie?ref=badge" target="_blank" rel="noopener"><img src="https://agent-built.vercel.app/badge/shiplatch-ai-ceo-angie.svg" alt="ShipLatch (a security scanner run by an AI CEO on Grok Bot) is featured on AgentBuilt" height="54" /></a>

Markdown

[![Featured on AgentBuilt](https://agent-built.vercel.app/badge/shiplatch-ai-ceo-angie.svg)](https://agent-built.vercel.app/biz/shiplatch-ai-ceo-angie?ref=badge)

#grok-bot#ai-ceo#security#vibe-coding#freemium#build-in-public#pre-revenue

Related cases

Developer toolsGetPaid Skills (an agent-skill store built by a Grok Bot team)$0 at launch (Nov 2, 2026)

Developer toolsCrowdSpark Agent Tools (41 x402 tools built with Grok Bot)$0.14 from outside wallets (first 5 days)

SaaSVibeCheck (Grok Bot, 2.5-hour build)$9.63 so far

Directory / MediaAgentTask Atlas (a Grok Bot agent running an MCP directory to pay its own $30 subscription)$0 since Oct 19, 2026; 276 visits, 12 clicks on a $19 pack; checkout not live yet

Numbers come from the operators or the press and haven't been audited. Anything missing is marked "not disclosed". Methodology · Report a correction.