State of app homepages on VibeKing
What a visitor's browser receives from the homepages of 2,065 live apps listed on VibeKing, checked once with the same code as VibeKing's free Vibe Check. 1,988 of them were imported from public launch directories, and the build tool is known for 112. No app is named, speed is left out, and none of this is a security audit.
- 97% of 2,065 listed apps answered with a homepage when we checked them on 2026-10-25.
- 99% have a page title and 94% a meta description; 71% have JSON-LD structured data.
- 85% have a valid sitemap and 49% publish an llms.txt for AI assistants.
- 85% send at least 600 characters of readable text before JavaScript runs; 13% send an app shell with under 200.
- 100% are served over HTTPS; 24% set a Content-Security-Policy.
How many listed apps are still live
n = 2,065 homepages scanned
Every app in the sample was marked live by VibeKing's own liveness probe, which re-checks each listed URL on a schedule; on 2026-10-25 it had 2,353 of 2,638 approved listings (89%) as live. Our scan asked more: a real web page, not just an answer. "Turned away" means HTTP 403, 429 or 503 or a bot challenge page; those sites may be fine for people and are not counted as down. "Did not answer with a page" covers timeouts, failed connections (which can also be a firewall dropping robots), DNS errors, other HTTP errors and responses that were not a web page.
Search basics
n = 2,005 homepages that answered
The most common of these basics is a page title (1,986 of 2,005); the least common is JSON-LD structured data (1,415 of 2,005).
AI readiness
n = 2,005 homepages that answered
An llms.txt is a plain-text summary of a site written for AI assistants. 102 of 2,005 block at least one of GPTBot, ClaudeBot and PerplexityBot in robots.txt; the rest allow all three, or have no robots.txt, which allows them by default.
What a crawler gets before JavaScript runs
n = 2,005 homepages, visible text in the HTML the server sends (median 6,159 characters)
An app shell sends almost no text until JavaScript fills the page in the browser. Search engines that run JavaScript can still read it later, and some builders pre-render pages for verified crawlers, which an outside check like this one cannot see. Crawlers that do not run JavaScript read only the HTML the server sends.
Security headers
n = 2,005 homepages, response headers and page HTML
What this does not check: logins, databases, API keys, or who can read an app's data. A site can pass every row above and still leak data, and a missing header does not mean an app has been attacked.
By builder tool
A tool gets its own column only when at least 30 answered apps in the sample were built with it. Apps in the sample for the other tools, all below that line: Claude 11, v0 10, Cursor 4, Base44 3, ChatGPT 3, Replit 3, Copilot 1, Gemini 1, GPT-4 1. The share in each column is of that column's n. Lovable: 80 answered apps, all found from markers Lovable puts into the sites it builds or hosts.
| Measure | All answered n = 2,005 | Lovable n = 80 | Other apps n = 1,925 |
|---|---|---|---|
| Has a page title | 99% | 98% | 99% |
| Has a meta description | 94% | 98% | 94% |
| Has a canonical link | 78% | 48% | 79% |
| Has a valid sitemap | 85% | 80% | 85% |
| Has JSON-LD structured data | 71% | 57% | 71% |
| Publishes /llms.txt | 49% | 61% | 48% |
| Readable: 600+ characters of text | 85% | 36% | 87% |
| App shell: under 200 characters | 13% | 57% | 11% |
| Served over HTTPS | 100% | 100% | 100% |
| Sends HSTS | 66% | 96% | 64% |
| Sends a Content-Security-Policy | 24% | 8% | 25% |
A difference between columns is a count, not a verdict on a tool: the apps differ in age, size and purpose, and this check sees only what any visitor's browser receives. Lovable documents pre-rendering for verified crawlers, which an outside check cannot see; the Lovable SEO and security report quotes that documentation.
FAQ
How many apps listed on VibeKing are still online?
On 2026-10-25 we checked the homepages of 2,065 live listings. 2,005 (97%) answered with a page, 48 turned automated checks away and 12 did not answer with a page.
Do these apps have the SEO basics?
Most have a title (99%) and a meta description (94%). Fewer have a canonical link (78%) or JSON-LD structured data (71%).
How many publish an llms.txt?
979 of 2,005 answered homepages (49%) serve a plain-text /llms.txt.
Is this a security audit?
No. It reads the response headers and HTML of one homepage fetch. It does not test logins, databases, API keys or who can read an app's data.
Method and limits
- Sample
- 2,065 homepages. We started from all 2,353 approved listings that VibeKing's liveness probe marked live and that have a site URL, then left out 4 sites run by VibeKing's maker, 211 listings whose link points below a site's root (an app store page, a GitHub repository, a post on someone else's site), because this check reads a site's homepage and for those links the homepage belongs to someone else, and 73 sites whose connection was intercepted by our scanning machine's antivirus on all 3 tries, so we could not read what they really send (they may differ from the rest).
- Who is in it
- 1,988 of the 2,065 came from a one-time import of public launch directories; the other 77 were submitted by their makers or added by hand. Being listed on VibeKing does not prove an app was vibe-coded: the build tool is known for 112 of them, detected from markers the tool puts into the sites it builds or hosts, or stated by the maker.
- Scan
- 2026-10-25, one run from one location. One fetch of each homepage with a desktop Chrome user agent, following redirects, plus its robots.txt, sitemap and llms.txt (and, only when the page has no viewport tag, one fetch with a phone user agent). Timeouts: 8 seconds for the homepage, 3 seconds for the other files. At most 4 sites at a time.
- Scanner version
- The Vibe Check engine (collectFacts and scoreFacts) at commit 5c4049c. No language model is involved in the counts.
- Limits
- Homepage only, a single fetch, one location, no login. No browser runs, so no JavaScript runs. A site that changed after 2026-10-25 may differ today.
- Left out
- Page speed and the overall Vibe Check score: measured from one location, they say more about the distance than about the apps. No app is named on this page or in the downloads.
- Disclosure
- VibeKing runs the scanner, and the apps are VibeKing listings. The build tool is detected by VibeKing or stated by the maker.
Downloads
Every number on this page as CSV and JSON: one row per measure and group, with count, n, percent and the definition used.
Cite as
VibeKing (2026). State of app homepages on VibeKing, October 2026 edition. Data checked 2026-10-25. https://vibeking.fun/reports/state-of-app-homepages
Changelog
- 2026-10-25October 2026 edition published: first run, over the live listings that link to a site's root.
Next edition: November 2026. All reports
Is your app in here?Vibe Check runs these same checks on your homepage for free and lists the top fixes.
Check my app