Vibe-Coded App Pen Test: Find Critical Flaws in 48 HoursJasper Rexford
88% of apps built on Lovable, Bolt, v0 and similar tools ship with Supabase Row Level Security disabled. 70% leak secrets in the client bundle. 10% leak PII outright. Most founders don't know because their builder didn't tell them and the platform doesn't warn them.
What you get
Automated agent scan plus manual triage across the 5 highest-hit vulnerability classes: Supabase RLS disabled or permissive, secrets in the client bundle, broken auth and IDOR, public storage and open CORS, prompt injection on agent endpoints
Severity-ranked report with reproduction steps for every finding
Quick-fix sketches for each issue (you or your AI builder can apply)
30-minute readout call to walk through findings
One free re-scan within 30 days after you ship fixes
Want me to fix what I find?
After the report lands you have two paths:
A-la-carte Fix Quote: I send a per-finding quote within 24h. Typical pricing: $120 per critical, $75 per high, $40 per medium. Pay only for what you want fixed. Most $497 audits convert into a $200-$600 fix engagement.
Upgrade to Pre-Launch Audit ($1,250): your $497 credits forward. Full coverage, fix PRs delivered, re-test pass, 60-minute readout.
You're never locked into either. The report is yours.
What this isn't
Not a SOC-2 readiness assessment
Not a compliance certification
Not a source-code-deep review of your full backend
Not penetration testing of infra (AWS / GCP / Cloudflare config)
Who this is for
Founders who've shipped a Lovable / Bolt / v0 / Cursor app to paying users and don't know what's exposed. Pre-launch is best. Post-launch is urgent.
Refund policy
If I find zero critical or high issues, full refund. The data says I almost certainly will.
About me
I'm Jasper Rexford. I build production AI agents for founders. I also break the ones built on Lovable, Bolt and v0 before your users do. Same toolchain, opposite side of the keyboard.
Starting at$497
Duration2 days
Tags
Claude
OpenAI
Python
Supabase
TypeScript
AI Agent Engineer
Automation Engineer
Security Engineer
Service provided by
Jasper Rexford proSunningdale, United Kingdom
Vibe-Coded App Pen Test: Find Critical Flaws in 48 HoursJasper Rexford
Starting at$497
Duration2 days
Tags
Claude
OpenAI
Python
Supabase
TypeScript
AI Agent Engineer
Automation Engineer
Security Engineer
88% of apps built on Lovable, Bolt, v0 and similar tools ship with Supabase Row Level Security disabled. 70% leak secrets in the client bundle. 10% leak PII outright. Most founders don't know because their builder didn't tell them and the platform doesn't warn them.
What you get
Automated agent scan plus manual triage across the 5 highest-hit vulnerability classes: Supabase RLS disabled or permissive, secrets in the client bundle, broken auth and IDOR, public storage and open CORS, prompt injection on agent endpoints
Severity-ranked report with reproduction steps for every finding
Quick-fix sketches for each issue (you or your AI builder can apply)
30-minute readout call to walk through findings
One free re-scan within 30 days after you ship fixes
Want me to fix what I find?
After the report lands you have two paths:
A-la-carte Fix Quote: I send a per-finding quote within 24h. Typical pricing: $120 per critical, $75 per high, $40 per medium. Pay only for what you want fixed. Most $497 audits convert into a $200-$600 fix engagement.
Upgrade to Pre-Launch Audit ($1,250): your $497 credits forward. Full coverage, fix PRs delivered, re-test pass, 60-minute readout.
You're never locked into either. The report is yours.
What this isn't
Not a SOC-2 readiness assessment
Not a compliance certification
Not a source-code-deep review of your full backend
Not penetration testing of infra (AWS / GCP / Cloudflare config)
Who this is for
Founders who've shipped a Lovable / Bolt / v0 / Cursor app to paying users and don't know what's exposed. Pre-launch is best. Post-launch is urgent.
Refund policy
If I find zero critical or high issues, full refund. The data says I almost certainly will.
About me
I'm Jasper Rexford. I build production AI agents for founders. I also break the ones built on Lovable, Bolt and v0 before your users do. Same toolchain, opposite side of the keyboard.
$497