Greenlight Review 2026: A Pre-Submission Compliance Scanner for the App Stores

Shipping an app to the App Store or Google Play means a review gauntlet. A single missed guideline can bounce your submission and cost you days. Greenlight is a command-line scanner that reads your project and tells you, before you submit, exactly what’s likely to fail — and cites the rule it’s breaking.

What is Greenlight?

Greenlight is a pre-submission compliance scanner for the Apple App Store and Google Play. It reads your source code, privacy manifests, Android manifests, Gradle builds, and IPA/APK/AAB binaries and checks them against Apple’s Review Guidelines and Google Play’s Developer Program Policies. Everything runs offline, with no account and no uploads — a full preflight on a mid-size project finishes in single-digit milliseconds. A separate verify tier runs your real app flows (account deletion, restore-purchases, Sign in with Apple) on a cloud device and fails the build if any of them dead-ends.

Key features

• Scans code, manifests, and binaries — privacy/Android manifests, Gradle builds, and IPA/APK/AAB files against store guidelines.
• Fully offline preflight — no account, no uploads, and every finding cites the exact rule.
• Four severity levels — --exit-code gates CI on CRITICAL and HIGH issues.
• greenlight verify — exercises real app flows (delete account, restore purchases, Sign in with Apple) on cloud devices.
• Fast install — Homebrew (brew install revylai/tap/greenlight) or go install, single-digit-millisecond preflight.

Who should use it?

Greenlight is for mobile teams shipping to Apple or Google — indie developers and agencies alike — who want a preflight check before burning a submission slot. It slots neatly into CI next to your existing agents like Claude Code or Cursor. If you don’t ship to the app stores, it has nothing to offer you.

Pros and cons

Pros: offline and private by default, precise rule citations, CI-friendly exit codes, real-flow verification.

Cons: narrow scope (App Store/Play only); the verify tier needs a free Revyl account and cloud devices; a static scan proves a flow exists, not that it works (only verify covers that).

Pricing

Free and open source (MIT). The verify tier requires a free Revyl account for the cloud devices it drives.

FAQ

Does Greenlight upload my code? No. The preflight scanner runs entirely offline on your machine.

What’s the difference between preflight and verify? preflight is a fast static scan (offline); verify actually runs your app’s critical flows on cloud devices and needs a free account.

Can I gate CI on it? Yes — greenlight preflight . --exit-code fails the build on CRITICAL and HIGH findings.