Code audit, £250 + VAT. A written report, a call and a fixed price for each fix, within five working days.
Take it on
You built it with AI. We'll take it from here.
You've done the hard part: you've proved the idea. Getting an app from a good demo to something real people and real money can rely on is a different job, and it's one we do all the time.
You'll be talking to one of us, not a salesperson.
Want it checked first?
What we usually find
Customers can see each other's data
The login works, but nothing checks what you're allowed to see once you're in. We find this nearly every time.
Keys left in the code
Passwords and API keys sitting where anybody curious can read them.
It's fine until it's busy
Missing database indexes, and two people doing the same thing at once.
No way back
No backups, no test copy, and the only version is the live one.
The AI has started going in circles
Every fix breaks something else, and each round costs you more credits.
Built by someone in the office?
It isn't always a founder. Someone clever in accounts or operations knocks up a tool with ChatGPT or Lovable, it saves the team hours, and six months later half the business relies on it. Nobody has checked who can log in or where the customer data goes.
People call this shadow IT. We call it someone being useful. They solved a real problem, so nobody's in trouble. We'll check it over, make it safe and give it a proper home.
We won't sneer at it.
Some developers love telling you your AI app is rubbish. We use the same tools you did. Usually there's plenty worth keeping, and it's far better than a spec, because it shows exactly what you meant.
We start with a code audit, £250 + VAT. Within five working days we'll read the code, check the hosting, backups and data, tell you plainly what's safe and what isn't, and give you a fixed price for each fix. Then you choose. Sometimes that's a week's work. Sometimes the right answer is to keep your design and rebuild the insides.
Then what?
Once it's safe, we'll get it properly live, with hosting, backups and a sensible way to release changes. You can carry on improving it yourself if you like it that way, or leave the looking after to us.
Worth a read first: a customer could see someone else's invoices and the thing we find every single time.
Want to check it yourself first?
Rob's guide to whether an AI-built app is safe to launch is a good start, and so is his piece on API keys in code.
Tell us what you've got
It goes straight to Rob and Jase. You'll hear back from one of us, usually the same day, and we'll tell you honestly whether we're the right people.