Built in a weekend.
Ready for real users?
Lovable, Bolt, v0 or Cursor get you a working app fast. Whether it is secure and holds up in production is a different question. I check it, then make it production ready. Fixed price.
A look under the hood.
Layer by layer.
Auth and permissions, database policies, exposed keys and secrets, input validation, dependencies. From €1,200.
One traffic light
per area.
You get a clear report: what is critical, what can wait, what is fine. Plus a fixed price for production readiness. Book it, and half the check fee is credited.
Gaps closed.
No rewrite.
Critical gaps first. Then tests, CI/CD, monitoring, error tracking and backups. As long as the foundation holds, your app stays your app.
Ready for real users.
Documented. Handed over.
Secure, monitored, maintainable. With documentation and a handover, so you or your team can keep building.
Fast to build. Easy to get wrong.
AI tools write code that works. They rarely write code that is secure by default. Missing database policies, keys in the frontend and unchecked inputs are typical, and they stay invisible until someone finds them.
The check finds them first. Before your users do, or your next invoice from the API provider.
Seven areas. One report.
Authentication & permissions
Who can log in, and who can see and change what.
Database policies
Row Level Security in Supabase and the equivalent rules elsewhere.
API keys & secrets
Nothing that belongs on the server ends up in the browser.
Input validation
Every form and endpoint checks what comes in.
Dependencies
Known vulnerabilities and outdated packages.
Cost & abuse
Limits and quotas, so nobody runs up your bill.
GDPR basics
Where data is stored, what gets logged, what is missing.
Check first. Then fix, at a fixed price.
- 01 / Security & code check
From €1,200
€1,200–2,200
All seven areas, a report with one traffic light per area and a fixed price for production readiness. Half the fee is credited when you book it.
- 02 / Production readiness
Fixed price
€6,000–22,000 · 2–6 weeks
Critical gaps closed, tests and CI/CD, monitoring and error tracking, backups, performance, accessibility, documentation and handover.
- 03 / Maintenance
Optional
€1,200–3,500 per month
Fixed monthly price. Updates, monitoring and small features within an agreed scope. Response within one business day.
Every offer includes a data protection concept. GDPR compliant, hosted in the EU.
Hiring a freelancer. Without the usual risks.
The typical concerns about freelancers. Answered before you ask.
Quality
At most two client projects at a time. Acceptance criteria in every offer, a preview per feature, CI with automated tests and a demo every one to two weeks.
Proof30 days of free bug fixes after acceptance. Professional liability insurance (exali).
Availability
A fixed backup developer from my network who knows the stack and the project. Payment by milestone, so you never pay ahead of the current one.
ProofSubstitution clause in the contract, milestone plan in the offer, response within one business day in maintenance.
Knowledge
Code, repos, hosting and domain accounts are yours from day one. A standard stack (Next.js, TypeScript). Documentation is a fixed deliverable: README, architecture overview, decision log, runbook.
ProofHandover session and a recorded code walkthrough, included in the fixed price.
Good questions. Straight answers.
What does the check cost, and what do I get?
Between €1,200 and €2,200, depending on the size of the app. You get a review of all seven areas, a report with one traffic light per area and a fixed price for production readiness. If you book it, half the check fee is credited.
Which tools do you check apps from?
Lovable, Bolt, v0 and Cursor, typically with Supabase or Firebase behind them. Apps from other tools are welcome too. Just say what yours is built with in the request.
Will you rewrite my app?
No, as long as the foundation holds. Production readiness closes the gaps and adds what is missing. Your app stays your app.
What if the foundation does not hold?
Then the report says so, and why. You decide how to continue.
What access do you need?
Read access to the repository and the backend configuration is enough for the check.
How long does production readiness take?
Usually two to six weeks, depending on what the check finds.
Who owns the code?
You do. Code, repos and accounts stay in your name, and documentation is part of the handover.
Know where you stand.
Before your users find out.
Start with the check. A fixed price, a clear report, and you decide what happens next.