I will fix security issues in your lovable, bolt or replit app


About this gig
Launching an app soon (Lovable, Bolt, Replit, Cursor or hand-built) and not sure it's safe? A researcher found 170 of 1,645 apps on one AI builder's showcase exposing data such as names, emails, phone numbers and payment details to anyone.
The Launch Blocker Check, $150: I run the standard security tools over your code and read where launch blockers usually sit, like Supabase access rules (RLS), sign-in, exposed API keys and payments. In 1 business day I name every blocker I find, most urgent first, each with the first step to fix it, plus a 20-minute call. Then I fix the one you pick, if it's about an hour's work, with a test we agree first. Either way, the $150 comes off any fix you buy within 14 days of the list. It's an engineering check, not a penetration test.
Want the rest fixed? You choose which, and I send one fixed price for the whole list as a custom offer here. At the end I retest everything and tell you plainly, based on what I checked: launch, or not yet.
If a fix fails its agreed test on the exact version of the code I handed over, within 90 days of delivery, I fix it free. I spent more than a decade as a software engineer at eBay.
Get to know Bryce W.
Senior engineer: I check, fix and build apps before launch
- FromUnited States
- Member sinceMay 2024
Languages
English
FAQ
What happens after the check?
If you want the rest fixed, you pick which blockers, and I send one fixed price for the whole list as a custom offer here. The $150 comes off it within 14 days of the list. Message me first; if you order and it doesn't fit, I'll cancel for a full refund.
How big an app do the prices cover?
One app with one database of up to 12 tables, the kind a single builder project creates. If yours is bigger, message me before ordering and I'll send a custom offer.
Do you test my live app?
No. I read the code and settings and test with accounts you create for me or a test copy. I never use a key I find or touch real user data.
Can I keep building in Lovable, Bolt or Replit after your fixes?
Yes. I make changes so they sync back, usually through its GitHub connection. If your builder can't take outside changes cleanly, I'll say so before you order.
What does the 90-day warranty cover?
A fix that fails the test we agreed, on the exact version I handed over. It doesn't cover later changes, including your builder rewriting the code, new features, or outages at Supabase, Stripe or your host.
What happens to my code?
I keep it confidential. My AI coding tools (Claude Code and Codex) read it with their training settings off, never your production database or users' records, and I delete my copies when we're done, except a shared Codex history on my computer that I can't clear per project.
Is this a security certificate?
No. It's an engineering check, not a penetration test, legal advice or a compliance certificate. I tell you what I checked and what I didn't.
Do my other gigs take the $150 credit?
Yes. My fixed-price Supabase access rules and Stripe webhook gigs take it if you order within 14 days of my Launch Blocker Check list. Message me and I'll send a custom offer at the lower price. Builds don't take the credit.
