Get your AI-built app ready for real customers, payments and data
AI coding tools get you to a working demo fast. The last part — the bit that keeps real customers, real money and personal data safe — is where they stall. I take AI-built apps (Lovable, Bolt, Replit, Cursor, and hand-written code too) and make them production-ready: a clear review of what's there, then the hardening work itself. Security, proper data separation between customers, payments that can't be bypassed, automated tests and a safe way to deploy. One senior developer who ships and runs live production software, not a rewrite-from-scratch pitch.
Sound familiar?
- Your app works in the demo, but you're nervous about letting real customers or real money near it
- It's built on Supabase or Firebase and you're not sure each customer's data is actually separated
- Sign-up or payment can be bypassed, or Stripe webhooks aren't handled properly
- API keys or secrets are sitting in the front-end code
- There are no tests and no staging, so every change risks breaking something you can't see
What you get
- A production-readiness review: security, data separation, payments, secrets, tests and deployment, each risk rated with what it takes to fix
- The hardening work itself: multi-tenant data isolation, payment and webhook integrity, secret management, input validation and error handling
- Automated tests around the core flows, and a safe, repeatable way to deploy
- A plain-English write-up of what was changed and why
- Full source code and ownership: no lock-in
Ways to work together
Every engagement starts with a small, paid, fixed-price first step. That's where requirements are gathered and the scope and cost estimate for the rest of the work are written, so you know what you're committing to.
Production-readiness review
from £1,500
A fixed-price review of the code, security, data handling and payments, each risk rated and costed. Yours to keep.
Production hardening
Estimated during the review
The fixes themselves, delivered against the review so you see the cost before committing.
Ongoing care
from £195 / month
Hosting, updates, security and small improvements on a monthly care plan once it's live.
Common questions
Which AI tools do you work with?
The output of any of them: Lovable, Bolt, Replit, Cursor, v0, and hand-written code too. What matters isn't the tool that generated it but what the app does, where the data lives and what has to be true before real customers use it. I read the code you have and work from there.
Will you rewrite it from scratch?
Almost never, and never without telling you first. The point of rescue work is to keep what works and fix what's unsafe. If an app genuinely needs a rewrite I'll say so in the review, with the reason and the cost, before any of that work starts.
What usually goes wrong in AI-built apps?
Data from different customers not properly separated (missing row-level security), sign-up or payment that can be bypassed, Stripe webhooks that aren't verified or get processed more than once, secret keys left in the front-end, no input validation, and no tests or staging so nobody can change anything safely. The review checks each of these.
How much does it cost?
The production-readiness review is fixed-price from £1,500 and is yours to keep whether or not I do the follow-on work. The hardening itself is estimated during the review, once the real risks are known, so you decide with a figure in front of you. Ongoing care starts from £195 a month.
Who owns the code and the accounts?
You do. The code, hosting, payments and third-party accounts stay in your name, and you keep the full source. There's no lock-in: you can bring it in-house or move to another developer whenever you choose.
Related work
Lineplate
A browser app that turns 3D CAD assemblies into finished technical documentation: hidden-line drawings, exploded views, ballooned parts lists and multi-page assembly manuals, kept up to date when the design changes.
Read the case study Financial services SaaS · 2018 to 2023Secure client-messaging SaaS for financial advisers
Co-created with a financial-services partner: a multi-tenant platform that let advice firms exchange messages and documents with clients securely, built for GDPR and FCA confidentiality. I architected, built and ran it in production for five years.
Read the case study Own SaaS productStoryPrompt
A year of weekly memoir prompts by email. Answers are collected without a login and typeset into a finished PDF book.
Read the case study Own SaaS productMy House Move Plan
A personalised week-by-week house-move plan for UK households, with ready-made change-of-address letters and PDF export.
Read the case studyHave a project in mind?
Tell me what you're trying to achieve, and I'll reply as soon as I can to say whether it's a fit and what the fixed-price first step costs.