01
Security & access
Permissions, secrets, admin actions, uploads, dependencies, and abuse paths.
Vibe-coded app review / by Shakirat
A senior engineer reviews your
vibe-coded app
before launch.
I’m Jasmine Ibikunle, a senior software engineer with 13+ years’ experience. I review your app’s security, data, sign-in, payments, and reliability—then give you a plain-English decision and ranked fix plan.
No call required. Prefer to ask a few questions first? Email Jasmine.
£595
fixed launch price
5 days
from access to readout
Senior-led
judgement, not a scanner
01 / Coverage
What I check in your AI-built app.
The review follows the product’s critical journeys across nine connected areas. Depth follows risk rather than treating every file as equally important.
02
Data & privacy
Customer isolation, integrity, migrations, backups, retention, and safe logging.
03
Architecture
System boundaries, maintainability, contracts, types, and handover readiness.
04
Auth & identity
Protected actions, roles, sessions, invitations, resets, and account ownership.
05
Payments
Price control, webhooks, entitlements, retries, refunds, and reconciliation.
06
Reliability
Failure handling, third-party risks, background jobs, recovery, and operations.
07
Infrastructure
Environments, CI, secrets, releases, rollback, ownership, and cost controls.
08
Testing
Critical journeys, negative access tests, payment flows, and release confidence.
09
Performance & UX
Queries, bundles, scaling limits, accessibility, and resilient user states.
02 / Deliverables
What you get from the review.
Everything is written for a founder first and detailed enough for an engineer to act on next.
- A clear Ready / Ready with conditions / Significant work required / Not ready decision
- Founder-readable executive summary and weighted category scorecard
- Prioritised findings with evidence, business impact, recommendation, and effort
- Architecture and data-flow summary
- Fix-now, fix-next, and can-wait action plan
- Issue-ready backlog your engineer can pick up
- An explicit ‘do not change’ section to protect what already works
03 / Process
How the vibe-coded app review works.
The scope stays tight so the outcome arrives quickly and every stage has a clear owner.
- 01
Check the fit
Answer a short scope check so the fixed-price review is the right fit. You can do this online; a call is optional.
- 02
Pay & reserve
Review the plain-English scope and terms, then pay £595 plus applicable tax securely online to reserve the review.
- 03
Share the essentials
Complete a focused intake and follow a guided checklist to share only the access needed. You do not need to know every technical detail before you begin.
- 04
Get the decision
Within five working days, you receive the report and issue-ready plan. We can handle questions by email or add a 45-minute readout call—whichever suits you.
Right fit
Built for the moment when “it works” is no longer enough.
You built quickly with AI-assisted tools and real users are next.
A client, investor, launch, or payment milestone needs more confidence.
You want a prioritised plan without paying for a vague rewrite.
You need senior judgement that a founder and engineer can both use.
04 / FAQ
Useful answers before you start.
Can you review an app built with Lovable, Bolt, Replit, v0, or Cursor?+
Yes. It is for AI-built or AI-assisted products where a founder or lean team moved quickly with tools such as Lovable, Bolt, Replit, v0, Cursor, Claude Code, or Windsurf—and now needs senior engineering confidence before the next business milestone.
Will you tell me to rebuild the product?+
Only if the evidence genuinely justifies it. The default is to preserve working software, repair the parts that can harm the business, and leave acceptable debt alone. Your report includes a specific ‘do not change’ section.
What is included in the £595 scope?+
One product, up to two tightly linked repositories, one main deployment, one primary database, one auth provider, and one payment provider. The review is risk-based rather than a line-by-line inspection of every file.
What access do you need?+
You do not need to know the technical names or have everything neatly organised. I will guide you through a short checklist, translate each request into plain English, and help you find what is needed. Usually that is read-only access to your code, a test version of the app, and a couple of test accounts. If your app uses hosting, a database, sign-in, payments, or error tracking, I may ask to see those settings too. Never email passwords, API keys, or customer data—I will show you a safer way to share access.
Is this a penetration test or security certification?+
No. It is a senior engineering production-readiness review. It does not include destructive testing, a penetration test, certification, or legal or compliance advice. Any area that needs specialist assurance will be identified clearly.
What happens after the review?+
You can fix the backlog yourself, give it to your existing engineer, hire someone else, or ask me to quote a focused hardening sprint. There is no obligation to buy implementation from me.
How does payment work?+
The standard review is paid upfront online. Once the short scope check confirms the fixed-price review is suitable, you can go straight to secure payment for £595 plus applicable tax—there is no required call. If you would rather ask questions first, we can do that entirely by email, or you can choose a free 20-minute fit call. The five-working-day window starts once payment, intake, and the minimum access are complete.
How do you use AI during the review?+
Automated tooling and AI can support evidence gathering and drafting, but senior judgement is the product. I do not put production customer data, secrets, or sensitive values into notes, reports, or AI tools.
Start your review
Know what needs attention before your users do.
Reserve the review securely with Stripe now, or use the scope-check form if you would like me to confirm fit before you pay.
Payment reserves your review. The five-working-day clock begins once payment, intake, and the minimum access are complete. Never include passwords, API keys, customer data, or other secrets.
Pay securely with Stripe — £595 + applicable tax
One-off payment. You will return here for the next steps after checkout.
No call required. If the fixed scope is not the right fit, I will say so before any payment is requested.