2–3 days at a fixed price. We run a security pass, smoke tests on every route and your critical flows by hand, then give you a ranked fix list to keep.
First 5 clients: $499
| Route | Smoke | Security | Flows by hand | Performance | Accessibility |
|---|---|---|---|---|---|
| Passed | Passed | Not applicable | Passed | Passed | |
| Passed | Passed | Passed | Passed | Passed | |
| Passed | Passed | Passed | Passed | Passed | |
| Passed | Fix-list item 04, High | Passed | Passed | Passed | |
| Passed | Passed | Passed | Passed | Fix-list item 05, Medium | |
| Not applicable | Fix-list item 03, High | Not applicable | Not applicable | Not applicable | |
| Not applicable | Fix-list item 01, Critical | Not applicable | Passed | Not applicable | |
| table: orders | Not applicable | Fix-list item 02, Critical | Not applicable | Not applicable | Not applicable |
Anyone who opens the browser’s developer tools can copy them.
On Supabase that’s a missing row-level security rule. You find out when someone posts your customers’ data.
Orders marked paid that never were, or paid orders that never arrive.
Revenue dips. No errors anywhere.
Launch knowing your app won’t leak data or lose orders on day one.
The security pass on its own, in one day.
You tell us what you built, what worries you and where it runs.
30 minutes
The live URL, a test account and written permission for the security pass. NDA first if you need one.
Before we start
Security pass, smoke suite on every route, critical flows by hand, performance and accessibility baseline.
2–3 days
Every bug reproduced in plain language and ranked by risk, then a call to go through it.
30-minute call
Account pages found users by ID alone, across every customer company.
No. We test the live app as your users would. Code access helps later, for a Fix Sprint.
The live URL, a test account and written permission for the security pass. Payments stay in test mode.
You keep the ranked fix list. Fix it yourself, or book a Fix Sprint and we fix the list, each fix with a test. Flow Watch then keeps an eye on your critical flows.
Lite is the security pass only, in one day. The full Ship Check adds the smoke suite, the critical flows by hand and the performance and accessibility baseline.
The first 5 clients pay $499 instead of €990. When the slots are gone, the price is €990.
An app, a rewrite, an AI agent, an automation, or a release that needs testing. A free 30-minute call, then a price in writing. If you don’t need us yet, we’ll say so.
Book a free call