Questions, answered plainly
Everything founders and engineers ask us most.
Getting started
What’s free?
Creating an account and scanning your live app with no card. Scan again any time (once every few minutes). The scan shows what anyone on the internet can see: secret keys left in your website, missing browser protections and loose login cookies, plus private files anyone can download once you show the app is yours, with a plain-words summary. You only pay when you want an engineer: the $299 audit or a monthly plan.
Do I need to be technical?
No. Everything is explained in plain words: what the problem is, who it could affect, and what we suggest. Your engineer does the technical work; you decide what gets fixed.
What’s a “vibe-coded” app?
An app built mostly by asking an AI tool, like Lovable, Bolt, Cursor, Replit, v0 or Claude Code, to write it. These tools get you to a working product fast, and often leave the same handful of safety gaps behind. Those are what we look for first.
Why not just ask ChatGPT to check my app?
A chatbot only sees the code you paste in. It can’t look at your live app, can’t prove what it finds, and won’t fix it or stand behind the fix. Here a senior engineer, using AI to move faster, looks at your whole app, shows you proof for every problem, then fixes it once you approve.
Engineers and audits
How do you pick my engineer?
Within 1 business day of your audit request, we look for a vetted engineer who works with the same tools you built with and has time this week, and we confirm the match by hand. You get an email with their name and why they were picked.
Can I ask for a different engineer?
Yes, any time. Use the “Request a different engineer” button in your project and we’ll match you with someone else.
How do you check the engineers?
Each one applies with their public work history, the tools they know and real apps they’ve shipped. We review every application by hand. They sign a contractor agreement and an NDA, only ever see the projects assigned to them, and everything they do is logged.
Do you need access to my code?
Not to sign up or to scan: the scan only looks at what’s already public. For an audit, your engineer needs to read your app. You share a read-only invite to the one project being audited, and nothing else.
Pricing and billing
How do I pay?
The scan is free. We’re in early access, so for the audit and plans we set up billing with you by email; online card payments are coming soon. Nothing is ever charged without your approval.
Could I get a surprise bill?
No. Every fix comes with a time estimate, and nothing starts until you approve it. Time comes out of hours you’ve already paid for. If a fix needs more, you’ll see the estimate first and can add hours at $75 each.
What counts as an hour?
Time your engineer logs on a fix you approved, in 15-minute steps. You can see every entry in your hours history.
Do I need the audit before a plan?
We recommend it. The audit shows your engineer how your app works and where it’s weak, so your hours go on fixes instead of getting up to speed. Its price is credited to your first month.
Can I change plans?
Yes. In early access we change your plan with you directly; self-serve changes arrive when billing opens.
Can I stop my plan?
Yes, you’re never locked in. While we’re in early access, plans start and stop by talking with us; self-serve plan changes arrive when billing opens.
Safety and privacy
Will you ask for my passwords?
Never in chat or email. Engineers work without your live passwords, and a private, time-limited way to share them, only when truly needed, is coming soon.
For engineers
I’m an engineer. How does it work for me?
Apply in about five minutes. Once approved, we match you with founders whose apps use the tools you know. You set your hourly rate and are paid per audit and for the time you log on fixes the founder approved.
See what anyone can see about your app
It takes about 20 seconds and costs nothing. If something needs fixing, a real engineer can take it from there.
Free · No card · Results in about 20 seconds · Engineers vetted and under NDA