Guide

I built it with Lovable, Bolt or Cursor. Does that matter?

The tools did their job. What matters is what they generated: React/Vite, Next.js, Supabase, Firebase. And whether the access rules around it hold up. A shakedown checks the app, not the tool that built it.

What the tools generate

Lovable, Bolt, v0, Replit, Cursor, Windsurf, Claude Code and Firebase Studio each generate a different stack. React/Vite, Next.js, Supabase, Firebase. The patterns are different, but the failure modes are the same: keys in the client bundle, data open to anyone, routes that skip the check. The shakedown is stack-agnostic.

Why the tool does not matter

A shakedown is a review of the app as it runs, not a review of the code as it was written. The engineer traces the routes the way a stranger would. They check the access rules the way a data breach would. They look for the keys the way a scanner would. The tool that wrote the code is not part of the review. See what we check.

Want it done for you?

I can go through all of it with you

A shakedown is me asking every one of these questions, of your whole app, and handing back a ranked report with a fix your own AI can apply. Quoted up front for the size of your app, fixed once agreed.

Not sure which one? Book the free 30-minute call and I'll help you choose.