Review & Secure
Vibe code check
The check for apps built with AI tools like Lovable: senior engineers assess your code for security, durability and personal data risks, and tell you what it takes to be ready for real users.
If the review turns up no improvements, we credit it.
Leon Katz · CIO
The verdict is human work: a senior reviews every report before it reaches you.
We assess apps built with
- Lovable
- Bolt
- Replit
- v0
- Base44
- Cursor
- and others
Built in a weekend. Now what?
You, a colleague or a brand manager built a working app with an AI tool like Lovable, Bolt or Replit. It works, it looks good, everyone is excited. Then comes the real question: is this safe enough to go live? Especially with customer data in it?
That is exactly the right moment for a check. Not to dampen the excitement, but to make it real.
What it is
What the vibe code check is
Security
How vulnerable is the code, and what could someone with bad intentions do with it?
Personal data
Where is data processed and stored, and where are the risks?
Durability
Can this foundation carry the app as it grows, or are you building on sand?
We use AI extensively ourselves, so we know exactly what AI tools do well and where they cut corners. But the verdict is human work: a senior reviews it and stands behind it.
What we find
What we see most in AI-built apps
Keys in the code
The database access key sits right in the source. Whether customer data can be read then depends on a single setting on the other side.
Personal data without agreements
Names and email addresses go straight to a cloud service, without a processor agreement, without a mention in the privacy statement, sometimes outside the EU.
Nothing against abuse
Unlimited submissions from any browser: polluted data, and costs per request when someone submits the form a hundred times.
Each of these is fixable, usually within a day. But you need to know them before real users go in.
What you get
Concrete deliverables
- A report with the risks and improvements we found, ranked by priority.
- A concrete recommendation per item: what, why, and in what order.
- A clear answer to the real question: what does it take before real users can go in?
- A session in which we walk through the report together and answer your questions.
Two certainties come with it, both literal: if the review turns up no improvements, we credit it. And if you choose a follow-up project with us, the check is fully deducted from it. What the check is not: a guarantee. Nobody in this field can give one, and neither can we. We help strengthen your defence and can implement the advice too; your app and your data remain yours.
Levels
From quick scan to deep check
Not every app needs the same. That is why there are levels: from a quick scan that surfaces the biggest risks to a deep check in which we examine the full code, data handling and infrastructure. During the intake we match the level to your situation.
Investment: from €1,250.
How it works
From intake to walkthrough
- 01
Intake
A short conversation about your app, what it is for and who will use it. This is where we pick the level of the check together.
- 02
Check
Senior engineers assess the code, the data handling and the setup, with extra attention to security and personal data.
- 03
Report
You receive the findings ranked by priority, with a concrete recommendation per item, in plain language.
- 04
Walkthrough
We go through the report together and make the road to production concrete. What you do with it is up to you.
After the check
The logical next steps
Case: assess first, then go live
Five points before go-live, and how they were solved.
From POC to production
Making your first working version ready for real users.
Integration in website/CMS
AI connected to the system you already know.
Co-pilot
Your dedicated digital team, you stay in the driver's seat.
Or back to the overview:Review & Secure
FAQ
Frequently asked questions
My app just works. Why a check?
The fact that it works proves your idea is right. But working and ready for real users are two different things: AI tools build fast, and cut corners on exactly the things you only notice when they go wrong: security, data handling, durability. The check surfaces those points before they go wrong.
There is customer data in my app. What do you look at?
We assess risks around personal data: where it is processed and stored, who can access it and where the technology is vulnerable. We report what we find and advise what deserves attention. It is not a legal compliance verdict; for that we will point you to a specialist.
Do you also make the app secure right away?
The check is the diagnosis. If you want us to do the work too, From POC to production is the logical next step: hardening security, stability and data handling. The check is fully deducted from it.
Which AI tools does this work with?
Almost all of them: Lovable, Bolt, Replit, or code written (partly) with AI assistance. During the intake we check whether your situation fits; if not, we say so upfront.
Is my app safe after the check?
Think of a home inspection: we show you which doors and windows are weak and what to do about them. But even with better locks and an alarm, nobody can promise that no one ever gets in. The same holds in our field, for us too. The check makes risks visible, the advice is meant to reduce them, and you decide what to do with it, yourself or with us; your app and your data remain your responsibility.
What if nothing is wrong?
Then you will hear it, in writing. If the review turns up no improvements, we credit it.
Ready to know for sure?
If the review turns up no improvements, we credit it.