Exhibit C · Tool
Is your AI-built app ready to launch?
Ten questions for apps built with Lovable, Bolt, Cursor or Replit.
Why these ten questions
AI builders produce working demos quickly, but security is easy to miss: in Veracode's 2025 tests of more than 100 AI models, 45% of AI-generated code samples contained a security flaw.1 The questions follow the order of risk, starting with who can see whose data.
- Data access
- Secrets
- Database rules
- Payments
- Backups
- Error alerts
- Tests
- Speed
- Running costs
- Code ownership
Sources
- Veracode, “2025 GenAI Code Security Report” (2025-07-30)
Questions
Do I need to share my code?
No. The check only asks about your app. If you want a fixed-price rescue plan, we review the code after you invite us to it.
What do the scores mean?
70 or more: close to launch, harden the gaps. 40 to 69: launchable after a focused round of fixes. Under 40: fix the top three areas before real users arrive.
What does a rescue cost?
Fixes start at $990. The price is fixed after a code review and before any work begins.
Ready to put it in writing?
Price your idea in about a minute, or book a free 30-minute call.