How the diagnostic works
The process has four steps, each with a defined owner and deadline. No work starts without the payment, the signed terms and proof that the app is yours.
From request to review meeting
- 1
Request
You send the app link, tell us the platform and describe the problem. An AI triage returns a short summary of the likely services, without accessing the app or the domain.
Owner: You · Deadline: 5 minutes - 2
Authorization and payment
You pay US$ 79 through a payment link, accept the terms and prove the app is yours. A read-only invitation on GitHub, plus a DNS TXT record or a meta tag on the site. Without both, the work does not start.
Owner: You · Deadline: Within 15 days - 3
Diagnostic
Our team reviews seven areas of the app plus the domain’s email setup. Critical findings are reported within 24 hours. The PDF report includes a quote for each fix.
Owner: Our team · Deadline: 2 business days - 4
Review meeting and proposal
We present the report in a 30 to 45 minute meeting and send the proposal the same day. If you hire us within 15 days, the US$ 79 is credited toward the price.
Owner: Our team · Deadline: Within 2 business days after
The report
The report lists the findings by severity, explains how to fix each one and includes a quote for the fixes. It contains no personal data, and secrets are masked.
- LightNo critical or high findings and up to 2 medium
- CautionNo critical findings, but 1 or more high or 3 or more medium
- Heavy1 or more critical findings
Findings by severity
- criticalSecret key in the browser
- criticalCustomers table open, no RLS
- highPersonal data without a privacy policy
- mediumApp locked into the platform
- mediumOrders list freezing on mobile
- lowPages Google cannot read
What the review covers
- SecuritySecrets, RLS or Firebase rules, routes without login, site, data protection and dependencies.
- CodeDuplicated snippets and flows, dead code and logic that only lives in the browser.
- Database and architectureDuplicate tables, missing relations, indexes and slow queries.
- DeploymentWhere the app runs, environment variables, HTTPS and automatic deploys.
- PlatformWhat locks the app into the platform and what can be exported.
- PerformanceMobile Lighthouse in production, median of 3 runs, and layout shifts.
- SEOTitles, descriptions, sitemap, robots, indexing and pre-rendered HTML.
- Domain emailSPF, DKIM, DMARC and MX: who is allowed to send email on behalf of your domain.
Rules that always apply
- The checkup and the fixes reduce the risk to your app. No service eliminates it.
- We only work on apps whose owners prove ownership. Agencies acting for a client bring the end owner’s written authorization.
- The triage AI does not access the app or the domain. We never test an app without authorization.
- We never ask for passwords or secret keys by message. Access is granted by invitation on the platform itself.
Within 5 business days of the review meeting, we delete our copies of the code and the access we were given, and send you the list of what you should revoke. Terms of use · Privacy policy
Frequently asked questions
Frequently asked questions
What if I cancel before the work starts?
If the work does not start, whether you cancel or the proof of ownership is not completed, we refund the payment in full. Once the work has started, meaning our team’s first check, there is no refund.
I am a consumer in Brazil. Do I have a right of withdrawal?
Yes. Under article 49 of Brazil’s Consumer Protection Code, you have 7 days to withdraw. If you want us to start before that period ends, request an immediate start in the terms or by email.
I run an agency and the app belongs to my client. Can I request it?
Yes, as long as you provide the end owner’s written authorization. Proof of ownership is still required: a read-only invitation on GitHub and a record on the domain.
Do I keep the report even if I don’t hire anything?
Yes. The report is yours. You can fix the issues yourself or with another team.
Start with the diagnostic.
The diagnostic costs US$ 79, paid by payment link. We deliver the report in 2 business days and walk you through the findings in a meeting. The fee is credited if you hire the service within 15 days. Everything we set up stays in your name.
Reduces the risk, does not eliminate it. We only work with the app’s owner, with proof of ownership.