Frequently asked questions
What apps do you fix?
Apps built with AI vibe-coding tools such as Lovable, Bolt, Cursor, Replit and v0, typically a React/Vite or Next.js front end with Supabase and Stripe.
What does the $149 Rescue include?
A flat-fee fix scoped up to about 10 database tables and 1 webhook: Supabase row-level security, leaked keys, Stripe webhook verification, auth issues and deploy problems. You get a before/after verification report within 48 hours.
Do you need my Supabase service-role key or passwords?
No. We never ask for master keys. You invite us to your GitHub repo and create a limited Supabase role for the engagement, which you can revoke at any time.
How is this different from asking a chatbot to fix it?
A chatbot suggests changes and says it is fixed. We run automated checks that try to break your app before and after the fix, and hand you the evidence: which attacks worked before and are blocked after.
What if my app is bigger than the Rescue scope?
We will tell you before starting and quote a flat price for the extra scope. You never get a surprise bill.
What happens if you cannot fix it?
If we cannot deliver a passing verification report for the agreed scope, you get a full refund.
Do you deploy to my production?
We open a pull request with the changes and the checks. You (or we, with your OK) merge and deploy it. Leaked keys must be rotated by you, and we show you exactly how.
When is the Care plan available?
The monthly Care plan is coming soon. Join the newsletter to hear when it opens.