You Built 90%
We Handle the Last 10%

Cursor, Claude Code, Lovable, Bolt, v0, Replit, and similar AI-assisted tools. We work with whatever code exists in your repository, however it was originally built, and that includes projects that mix AI-written and hand-written code.

In most cases, no. We build on the existing codebase and fix structural and security problems in place. A full rewrite is rarely necessary or cost-effective, and if we think one is the right call, we will explain why before you spend anything on it.

Exposed API keys and secrets committed to the repository, missing authentication checks on API endpoints, unvalidated user input, and database access rules that let far too many people read or change data are the most common findings.

Yes. Once the foundation is solid and secure, we can continue building new features as an ongoing engagement, working within the existing codebase and its conventions.

A focused app with a moderate feature set typically takes 2-3 weeks from audit to production-ready launch. Larger or more complex codebases, or ones with significant security gaps, can take 4-6 weeks.

Prices start at $500 (quick security check) and $1,500 (full audit with report); fixing the issues starts at $3,500 and a full cleanup from $5,000, depending on codebase size and what the audit finds. We always start with a fixed-price audit, so you know the scope and cost of remediation before committing to the full engagement.

You will understand it. We document the architecture, tidy the structure as we go, and walk your team through the code, so you are never dependent on us to make future changes.

We handle that too. The audit is the same, but we triage live issues first and stop the active problems before moving on to the broader hardening and completion work.

Read access to the repository, a list of the services the app relies on (database, payments, email, hosting), and a short note on how you expect people to use it. We do not need production passwords to audit the code.

You own every account: the hosting, the domain, the database, and the code repository. We set things up inside your accounts, or hand them over cleanly, and we can use a Thai or regional provider where data location matters to you.