One one-time package to get your AI-built app safe for real customers, then a plan that keeps it that way. Start with the free check — no quotes, no surprises.
Check your app free →Deploy, and never ship a breach.
A senior dev fixes everything your free check found on your live app, then re-scans to verify.
Hands-on senior-dev retainer for your live app — fixes, monitoring, and fast response.
Every critical we find, we fix and verify — or 100% of your money back. One flat $499 — the code-level pass is included, not billed on top. The free check tells you where your app stands.
Every critical we find, we fix and verify — or 100% of your money back. Refund terms in plain language, no fine print.
Your app is handled personally by a senior engineer who knows your system — not a ticket queue, not a chatbot, not a rotating cast.
The check makes look-only requests to your live site. We never change your data, store your code, or log in with special access.
See how the check works →Critical = something’s exposed right now: a leaked key, a database anyone can change, or your users’ personal data leaking.
A senior dev fixes everything your free check found on your live app — exposed keys swapped, your database locked down, protections added — then re-scans to show before and after. It's a one-time $499, fixed scope, shipped within 48 hours. If your scan turns up deeper, code-level issues, we'll walk you through the options once you're in — the price on this page is the whole package for a standard fix.
Ship ($29/mo) is where your app lives: we host it (deploy, custom domain, SSL — up to 3 projects), and every deploy passes through a security gate — if an update contains a leaked key or a database anyone can write to, it stops before going live and your last good version stays up. We keep re-scanning your live app, and your customer analytics (live visitors, what they use, where they drop off) are built in. Care adds the team that does the fixing: everything in Ship, plus a senior dev who knows your system and handles fixes each month. Start on Ship; move to Care the day you'd rather pay than spend a Saturday debugging. Care is priced to your app — enquire and we'll size it with you.
Then the package is free. Every critical we find, we fix and verify — or you get 100% of your money back. We keep 'critical' strict: live keys exposed in the code your app ships, private database tables anyone can read or change, pages that hand data to people who never logged in, or a test Stripe key left live in your real app. And if a paid fix doesn't solve what it set out to, full refund. These problems are common in AI-built apps — so the guarantee is there so you don't have to gamble.
The free check runs about 48 checks against your live site — databases anyone can read, secret keys left in your code, hidden code left exposed, exposed files like .env and .git, doors open to other websites, pages with no login check, browser protections, cookies, email and domain safety, and encryption. It finds what your users could find. A deeper, code-level review adds access to your actual code (GitHub or Lovable share link): we deep-scan your source, comb your full history for old keys that were never swapped out, and check your database rules by hand. It finds what an attacker with your code would find — and we set that up with you once you're a customer. The difference is how much becomes visible — not how hard we work.
One issue we track down and fix — a broken Stripe payment, a database rule letting the wrong people in, a leaked key. Care includes a set number of fix tickets each month; we'll size it to your app when you enquire. We skip 'unlimited' on purpose — it just attracts the few apps that would swamp us and make service worse for everyone.
If we can't fix it in the time your plan promises, we put our top hands-on team on it at no extra charge, refund the month, or both. We'd rather lose money than leave you down.
No. We support Lovable, Bolt, v0, Cursor, Replit, Bubble, and Base44 out of the box. We're platform-neutral — that's the point.
After you've been a Care customer for six months we'll offer annual prepay (2 months free) on renewal. We don't push annual at signup — early-stage founders shouldn't commit to a year of anything before they've seen us deliver.
Yes. We make look-only requests to your live site plus a few harmless knocks on the addresses it uses. We never change your data, store your code, or log in with special access.
Not yet — it ships in Phase 3. We'll never imply your app is certified before the badge actually ships.