Sign-in and access
Can one customer see another's data? Do admin pages check who is asking? I test the rules behind the screens, not just the screens.
App rescue
Is your app safe to put in front of customers?
AI tools make it quick to build an app, and easy to miss what keeps it safe. I check who can see what, how customer data and payments are handled and what is exposed online, then fix the problems in priority order.
£495 health check · Findings within 5 working days. Fixes quoted from them, with the fee credited if you go ahead within 30 days.
Sound familiar?
- Your app was built with AI tools and you are not sure what is happening under the hood.
- The developer who built it has moved on, and every change breaks something else.
- You are about to take payments or store customer data and want a second pair of eyes.
- Each new feature feels riskier than the last.
What I check and fix
Exposed data and keys
Secret keys shipped to the browser, database rules that allow too much, open storage and credentials sitting in the code.
Payments and the journeys you rely on
Checkout, payment events, sign-up and the other journeys your business depends on, tested end to end.
Deployment and handover
Reliable releases, backups, environment settings and notes, so the next change is safer than the last.
Use cases I’ve built
My product
Cyber Essentials Workspace
Software that helps organisations prepare for Cyber Essentials, the UK government-backed security scheme. Security is the subject, not an afterthought.
See Cyber Essentials WorkspaceUse cases
PayerPing and Enquiry Fox
Production apps I've built with customer accounts, connected email and CRM access, so I know what has to hold up after launch.
See PayerPing and Enquiry FoxMy articles
Vibe coding and app rescue guides
Practical guides on making AI-built apps safe to launch, published on this site.
See Vibe coding and app rescue guidesHow it works
01
Health check: £495
I review one web app: one code repository, one database project and its hosting. Within 5 working days of access you get prioritised findings in plain English.
02
Fix what matters most
We agree the fixes from the findings, starting with security and customer data. Each one comes with a fixed quote.
03
Hand back an app you can build on
Tests for the journeys that matter, a reliable way to release, and notes so you or your next developer can keep going.
Built secure
Security is part of the build, not an extra.
- Findings ranked by risk, explained without jargon.
- Security and customer data are fixed first.
- You keep ownership of your code, accounts and hosting throughout.
- Happy to sign an NDA before you share any code.
Questions people ask
What kinds of apps do you check?
JavaScript and TypeScript web applications, including ones built with AI coding tools or inherited from another developer. The health check covers one app: one code repository, one database project and its hosting.
What access do you need?
Read access to the code repository, the database project and the hosting. You stay in control of the accounts and can remove my access at any time.
Should I just rebuild it?
Sometimes that is the right answer. The health check tells you which parts are worth fixing and which would be cheaper to replace, before you spend money on either.
Starting price
£495 health check
Findings within 5 working days. Fixes quoted from them, with the fee credited if you go ahead within 30 days.
Prices in GBP. RightCyber is not VAT-registered, so no VAT is added. Scope and price are confirmed in a written proposal before work starts.
Let’s talk
Ready when you are.
You don’t need a finished brief. Tell me what’s getting in the way and I’ll reply by email.