Free Vibe-Code Audit
You built something with AI and it works. Whether it is safe, cheap, and findable is a different question. Tell me what you built and what worries you, and I will send back a written review — by email, within 2 business days.
Six questions, about two minutes. Opens in a new tab.
Your URL, what you built it with, what you want looked at, and the one thing you actually want answered. Takes about two minutes.
I open your site and go through the areas you picked. This is not an automated scanner — it is me reading your app the way an engineer would before touching it.
A real email with what I found, what I would fix first, and what I would leave alone. No deck, no call required, no obligation.
Start your audit
Six questions, about two minutes. You will get a confirmation straight away, then the written review by email within 2 business days. No spam, unsubscribe anytime.
Start my free auditWhat I look at
You choose which of these apply. Picking fewer gets you a deeper answer on the ones you pick.
Leaked API keys, open database rules, endpoints that trust the client, and anything a stranger can read that they should not.
Whether you actually need a privacy policy, terms, cookie consent, or GDPR handling — and which of those you are missing.
The queries and unoptimised media that quietly turn a $5 bill into a $500 one once real traffic arrives.
Whether search engines can crawl and understand the site at all: metadata, rendering, sitemaps, and structure.
Whether the page earns the click before you pay for it, and whether your tracking would even tell you if it did.
Cost per request, prompt fragility, missing fallbacks, and the failure modes that only show up in front of real users.
Loops without limits, retries that compound, and the steps a human still needs to approve before they run.
This is for you if
- You shipped something with Replit, Lovable, Bolt, v0, Cursor, or a no-code builder.
- It works, but you are not sure it is safe to put in front of real users.
- You have a specific worry — a cost, a leak, a page nobody can find.
- You can share a live URL I can actually open.
This is not for you if
- The site is not live yet and there is nothing for me to look at.
- You want a full penetration test or a compliance certification.
- You want me to rewrite the app for free rather than tell you what is wrong.
If I am not the right fit for what you are dealing with, I will say so rather than sell you something.
Questions
Would rather just talk?
If the problem is already on fire, skip the form. Fifteen minutes, free — you describe the blocker, I tell you what I would fix first.
Or see how I work with teams.