Skip to content
BuildThenTestedSee packages

Packages and prices

Fixed price, turnaround in hours or days, itemised deliverables and a written money-back term on every package. Choose by the moment you are in: before launch, before payments, before a review, or after an incident. Every order starts with an email; we reply within 24 hours.

  • Pre-launch check

    Start here

    For founders about to let real users in.

    $490

    Report in 48 hours
    • Keys and secrets in the browser or repo
    • Who can read and change whose data
    • Login, roles and admin routes
    • Errors, retries and rate limits
    • Debug mode, headers, deploy path

    What you receive

    Order by emailDetails

  • Security sweep

    For anyone who wants the three riskiest areas checked fast.

    $290

    Report in 24 hours
    • API keys and secrets in the bundle
    • Row-level rules on every table
    • Cross-user data reads
    • Admin and hidden routes
    • Client-only permission checks

    What you receive

    Order by emailDetails

  • Ready-to-charge check

    For anyone about to switch Stripe to live mode.

    $390

    Report in 48 hours
    • Webhook signature verification
    • Plan and price enforced on the server
    • Subscription state you can trust
    • Duplicate charges and refunds
    • Model and API spend caps

    What you receive

    Order by emailDetails

  • Full audit

    For teams and startups who need a document, not just a list.

    $1,900

    Report in 5 business days
    • All catalogue categories
    • Repository and live app
    • Investor-ready summary document
    • Prioritised fix roadmap
    • One-hour walkthrough call

    What you receive

    Order by emailDetails

  • Test suite build

    For teams who want the checks to run on every push.

    from $2,400

    Report in 2 weeks
    • End-to-end tests for critical flows
    • Permission tests per role
    • Payment flow tests with Stripe test mode
    • CI pipeline on every push
    • Handover document

    What you receive

    Order by emailDetails

  • Monthly testing retainer

    For teams and agencies that release every week.

    from $1,500/mo

    ongoing
    • Every release tested
    • Standing secrets and data access check
    • Monthly findings report
    • Priority channel
    • Cancel monthly

    What you receive

    Order by emailDetails

  • Agency white-label

    For studios handing AI-built products to clients.

    quoted

    per project
    • Pre-handover check per project
    • Report in your branding
    • Same public checklist
    • Volume pricing
    • Optional client walkthrough

    What you receive

    Order by emailDetails

  • Incident response check

    For the day something has already gone wrong.

    $790

    Report in 24 hours
    • Same-day start
    • What is reachable right now
    • Containment steps in order
    • Key rotation and revocation list
    • Findings report and fixes

    What you receive

    Order by emailDetails

Prices in US dollars. Packages marked from are quoted after a short scoping email. Payment details follow by email; there is no checkout on the site.

Which one first

Before launch

Real users arrive next week. Start with the pre-launch check.

Before payments

Stripe is about to go live. Start with the ready-to-charge check.

Before a review

An investor or enterprise buyer asked for a security summary. Start with the full audit.

What every report contains

  • Findings with severity (Critical, high or medium, by what an attacker or a failure could reach.), mechanism and the affected path or table.
  • A plain-English summary a non-technical reader can act on.
  • A fix direction per finding, written so your developer or your AI tool can apply it.
  • A re-check of critical findings after your fixes, within the package window, included.

Read the sample report to see the exact format. The checks come from the failure catalogue (54 patterns).

How it works

  1. Step 1

    Share access

    Send the app URL and a test login by email. For code review packages, add read access to the repository.

  2. Step 2

    We test

    We run the checklist for your package against the live app, by hand and with scripts, inside the turnaround.

  3. Step 3

    Report and call

    You receive the findings report and a plain-English summary. We walk you through it if the package includes a call.

  4. Step 4

    Re-check after fixes

    Fix with your developer or your AI tool, then we re-test the critical findings within the re-check window, included.

Questions about packages

vibe code audit

An independent test of an app built with an AI tool, against a published checklist, with a report of what was found and how to fix it. Our packages start at $290 for a 24-hour security sweep; every price and turnaround is on this page.

test my ai built app

Pick the package that matches your moment: pre-launch check before real users, ready-to-charge check before live payments, full audit before an investor or enterprise review, incident response check when something has already happened. Order by email; we reply within 24 hours.

ai generated code review service

The full audit and the test suite build work from your repository as well as the live app. Both are fixed-price and deliver a report and, for the test suite build, tests running in your CI.

how do i pay for a package

Order by email from the package page. We confirm scope and access within 24 hours and send payment details by email. There is no checkout on the site.