Why does it cost €99 rather than nothing?

Because a person does it properly, reading your code and your live app, not a scanner. The fee means we can give every request a real look, and it is credited in full against the build if you hire us afterwards.

Do you need my passwords?

No. Read access to the repository, and a test login for each kind of user, created for the purpose. We never test against your real customers’ accounts or data.

What if my app is not live yet?

Even better. A preview or staging link is enough, and the cheapest time to fix an open database or an exposed key is before the first real user signs up.

What is the difference between the Prototype Check and the five-day audit?

The check finds the top risks quickly, so you know whether it is safe to launch and where the danger is. The five-day audit goes through everything and costs each fix, so you can plan the work. Most people start with the check.

Which tools do you check?

Lovable, Bolt, v0, Replit and Cursor, and anything else that produced a working web app. The tool matters less than what it left behind.

Prototype Check · €99

Is your AI-built app safe to launch?

Built it with Lovable, Bolt, v0 or Replit? A person on our team goes through your app and your code and sends you the top security and data risks in writing within 48 hours, then walks you through them on a 15-minute call. €99, credited in full if you hire us to fix it.

How it works

1
You fill in the form
The app, the tool that built it, and what worries you. Nothing to pay yet.
2
We reply within one business day
With a payment link for €99 and a short note on how to give us read access to the code and a test login.
3
Within 48 hours, the findings
The clock starts once payment and access are in. You get the top security and data risks in writing, most expensive first, with a rough effort for each fix.
4
A 15-minute call
We walk you through it and answer questions. Then it is your decision: fix it yourselves, the full five-day audit, or have us do the work, with the €99 credited.

What we look at

Who can read or change whose data, and whether the server actually checks
Database rules: row-level security, open storage buckets, test-mode rules left on
Keys and secrets shipped to the browser
Payments: amounts decided on the server, webhooks verified, orders not trusting the success page
Personal data: what is stored, where, and whether it can be deleted
The things that break first under real use: unpaginated lists, missing error handling, no migrations

What usually goes wrong, tool by tool: Lovable, Bolt, v0 and Replit. The full service is prototype to production.

Request a Prototype Check

Questions

Why does it cost €99 rather than nothing?: Because a person does it properly, reading your code and your live app, not a scanner. The fee means we can give every request a real look, and it is credited in full against the build if you hire us afterwards.
Do you need my passwords?: No. Read access to the repository, and a test login for each kind of user, created for the purpose. We never test against your real customers’ accounts or data.
What if my app is not live yet?: Even better. A preview or staging link is enough, and the cheapest time to fix an open database or an exposed key is before the first real user signs up.
What is the difference between the Prototype Check and the five-day audit?: The check finds the top risks quickly, so you know whether it is safe to launch and where the danger is. The five-day audit goes through everything and costs each fix, so you can plan the work. Most people start with the check.
Which tools do you check?: Lovable, Bolt, v0, Replit and Cursor, and anything else that produced a working web app. The tool matters less than what it left behind.