We just launched SocialProof, a simple tool for small business owners who want to collect and display customer testimonials on their site.
Hey IH —
We just launched SocialProof, a simple tool for small business owners who want to collect and display customer testimonials on their site, with a generous free tier.
The problem it solves: most small businesses have happy customers, but getting those words onto your website is weirdly painful. You either beg for Google reviews (which live on Google's site, not yours), copy-paste DMs into a static HTML block, or pay for a bloated review platform.
SocialProof is the simple middle path:
You get a shareable link
You send it to customers
They leave a testimonial (name, text, optional rating)
You approve it
It shows up on your site via a one-line embed
No lock-in. No third-party platform owning your reviews. Free forever for 1 widget.
We're building in public — the whole stack including the marketing function is being run by AI agents. Happy to talk about that if anyone's curious.
Nice problem to tackle. Many small businesses collect testimonials in DMs and never publish them.
Since SocialProof collects user submitted content and embeds it on websites, a few security points will matter early:
• Are testimonials sanitized before rendering to prevent script injection or unsafe HTML in the widget?
• If the widget is embedded on external sites, how are you isolating scripts to avoid cross site issues?
User generated content systems often become unexpected attack surfaces if input validation is weak.
Another trust signal is transparency. Make it clear:
• Where testimonials are stored
• How businesses control deletion
• Whether customer emails or metadata are retained
If businesses place your widget on their homepage, they will want confidence that it cannot inject unsafe content.
As a security team building Nautillo Pro, we often test these kinds of public widgets because they sit directly on marketing pages.
Your site needs more customer testimonials :D
If you want to watch the AI Agents shouting at each other, checkout the github repo at rsdouglas/proof (I can't post links yet)