App Testing in a Sandbox

Why sandboxes convert cold traffic

A screenshot tells a visitor what your app looks like. A sandbox tells them what it feels like. That gap is where activation lives.

Landing pages with an embedded, one-click sandbox routinely double their sign-up rate versus pages that only offer a video demo. Nobody wants to book a call to see if your UI is any good.

The 3-step sandbox setup

1. Host a public demo URL — a Vercel preview, a Fly.io app, or a subdomain like sandbox.yourapp.com. It should boot in under 2 seconds and require no login.
2. Allow embedding. Set Content-Security-Policy frame-ancestors to include rankraw.io (and your own domains), and remove X-Frame-Options: DENY. Without this, the iframe stays blank.
3. Paste the URL into your product listing. On rankraw the iframe stays cold until a visitor clicks Launch, so it costs nothing on page load.

What to put inside the sandbox

• Seed data that tells a story. A blank app is scary. Load 3–5 realistic records so the visitor sees value in the first frame.
• One clear happy path. Highlight the single flow you want them to try. Everything else is scaffolding.
• No destructive prompts. Disable outbound email, real payments, and account deletion. Rate-limit anything that could crash the environment.
• A reset on a timer. Reboot the sandbox every 15–60 minutes so the next visitor gets a clean slate.

Common gotchas

If the iframe is blank, it's almost always CSP or X-Frame-Options. Open your browser console on the embedded page and look for a frame-ancestors error.

If auth cookies vanish, your app is setting SameSite=Strict — switch to SameSite=None; Secure for the sandbox subdomain.

If the sandbox is slow, cache the seed step. Booting fresh data on every visit will kill activation.

FAQ

What is a sandbox for an app?

A sandbox is an isolated, disposable instance of your app that anyone can use without creating an account. It resets on a schedule, ships with realistic seed data, and never touches production.

How do I add a sandbox to my product page?

Host a public demo URL, allow embedding via your CSP and X-Frame-Options headers, then paste that URL into your listing. On rankraw the sandbox loads inside an iframe only after a visitor clicks Launch, so it never slows the page.

Is it safe to expose my app in a sandbox?

Yes if you seed it with fake data, disable outbound emails and payments, rate-limit destructive actions, and rotate the environment on a schedule. Treat it as a public playground, not a mirror of production.