01 Anomaly · Security
Secrets in the source
API keys embedded in frontend code, no rate limiting, auth bolted on as an afterthought. One curious user away from an incident.
Rescue & hardening
An AI app that almost works is still an app that can’t go live. We rescue and harden the MVP so you launch production-grade: security, GDPR, app store readiness, payments, maintainability.
Teams we’ve kept out of trouble
MarsWalmartOxford University PressFinancial TimesPearsonClickBSLDictionary.comMediacomRACKArt FundLexicoCarrefourSmart_RWrigleyBikeAway
The wall
The demo worked. Production is a different planet.
02 Anomaly · Compliance
GDPR was never in the prompt
Personal data with no lawful basis on record, no deletion flows, no DPAs. A regulatory fine waiting for a hearing date.
03 Anomaly · Maintainability
Nobody can change it safely
No tests, no environments, no deploy pipeline. Every change is a gamble, and the AI that wrote it isn’t on call.
Launch readiness
Five stations. Zero surprises.
- STN–01
Security
GoSecret management, authentication, authorisation, rate limiting, dependency audits: a hard look at everything the AI glossed over.
- STN–02
GDPR & data protection
GoData mapping, lawful basis, retention and deletion flows, cookie consent, processor agreements, aligned to UK and EU standards.
- STN–03
App store readiness
GoApple and Google review requirements, privacy manifests, in-app purchase rules, store assets and submission, handled.
- STN–04
Payments
GoProduction-grade Stripe or store billing: webhooks, retries, refunds, VAT, dunning. Money that actually arrives.
- STN–05
Maintainability
GoTests, CI/CD, environments, monitoring, documentation, so the next change is routine, not a rescue.
Flight plan
Four weeks to orbit.
T-minus 4 wks
Intake
We take your codebase as it is, no judgement, and map what was built, what was assumed, and what’s missing.
T-minus 3 wks
Audit
A full five-station go/no-go poll, delivered as prioritised findings with a fixed price to fix them.
T-minus 2 wks
Harden
We work through every flagged item (security, compliance, payments) until each station reads GO.
T-zero
Launch & hold
Store submission, go-live support, and a steady hand on the console after launch.
Ready for the go/no-go poll?
Know exactly what stands between your MVP and launch.
Book a rescue assessment. We’ll come back within one working day with a clear, fixed-price proposal for next steps.