Code audit for apps built with AI
Would your AI-built app pass inspection?
Apps made with Lovable, Bolt or Cursor can look finished and still leave customer data or paid keys open to anyone. Send me the address and I'll email you what a free check finds.
The check needs no access to your code. If you want more, a written code audit costs a fixed price.
- Secret keys in public code
- Fail
- Stripe secret key, visible to every visitor
- Customer data open without login
- Fail
- Table "users": 412 rows, including email
- Private files reachable (.env, .git)
- Pass
- Payments in live mode
- Pass
- One user can open another's data
- Not checked
- Needs a person reading the code
What gets checked
Free check
Looks at your live app from the outside, the way a stranger could.
- Secret keys sent to the browser
- Database tables anyone can read
- Files that should never be public
- Payments left in test mode
- Launch basics, such as page titles and Google indexing
Code audit
Everything in the free check, plus what only someone reading your code can find.
- Whether one user can reach another user's data
- Whether login and password reset can be bypassed
- Whether paid features can be used without paying
- Whether payments, the database and the screen stay in step when something fails
- Which fixes matter now and which can wait
Neither one proves an app is safe. Each report lists what was checked and what wasn't.
Code audit price
$190 $490
$190 for the first three audits, in exchange for permission to describe the result without naming you. After that, $490.
- What you get
- A written report in plain English, ranked by what to fix first, with instructions you can hand to your AI tool or a developer.
- Delivery
- Three working days from payment and access to your code.
- Refund
- If I find nothing worth fixing, you get your money back.
- Fixes
- Optional. I can do them at a fixed price agreed after the audit.
- Payment
- By invoice in USD, EUR or GBP through a payment operator, before work starts.
This is a planned audit, not on-call support. I work on audits outside my day job, so I can't fix an outage within the hour. Full details are in the audit terms (PDF).
What access you give
Read-only access to your code repository, which you can remove with one click. I never ask for your passwords or API keys, and I'll sign your NDA if you have one. The free check needs no access at all, and no data from your database is kept.
Who does the work
I'm Patryk Sylwerski, a developer in Poland. I write software used every day in an accounting office, and with Kacper Zagermann I build websites for small businesses as Zagersky. I read your code with AI tools, including Anthropic's Claude, and I confirm every finding myself before it goes in your report.
Get the free check
I check 10 apps for free during this trial and reply by email within two working days.
Your details are used only to reply about this check. See the privacy notice.