Rescue audit for AI-built apps
Built with Lovable, Bolt or Cursor? Make sure it holds.
AI tools get an app live in days. They also leave the same handful of gaps, and they're quietly confident they haven't. If real customers or payments now depend on your app, get it checked by a senior engineer, and get the worst of it fixed.
The gaps AI tools tend to leave
Data anyone can read
Database tables with row level security off, or rules so loose that your public key opens them. One customer can see another's records.
Keys in the browser
Secret keys pasted into frontend code or prompts, including the database key that ignores every access rule.
Payments that can be faked
Webhooks that trust whatever they're sent, so a forged "payment succeeded" unlocks paid features for free.
Fixes that undo fixes
Each prompt fixes one screen and can break an earlier fix. Nobody has the whole picture, least of all the tool.
No way back
Backups that were never restored, so nobody knows if they work, and no record of what changed when.
Accounts in the wrong hands
Hosting, domain or payment accounts in a freelancer's or a former co-founder's name.
The rescue audit
£950fixed fee, seven working days from access
Founding clients: the first three audits are £650 in return for a short testimonial.
- Read-only review of the code, database rules, payments, hosting and who owns each account
- Every finding ranked by severity, with the hours to fix it, and a clear fix-or-rebuild verdict
- One-hour walkthrough call in plain English
- Up to four hours fixing the most serious findings, as changes you approve
- First month of Caretaker at half price if you want someone to keep it safe afterwards
Who's checking
Robert Udah, a senior engineer with twelve years on production systems at places like Sky, HMRC and Goldman Sachs. He uses AI coding tools every day, which is exactly why he doesn't take their word for it. Supported stacks include Supabase, Firebase, Next.js, React, Node and Postgres, on Vercel, Netlify, Render or Railway. More about Robert
Not sure it needs an audit?
Tell me what the app does and who uses it. Fifteen minutes is enough to say whether it is worth it.
Or email [email protected]