Ship Safe by Menelabs
Your AI writes the code. We make sure it is safe to ship.
And that it stays that way. Fixed-price security, hosting and code reviews for apps built with Lovable, Bolt, Cursor or Claude Code.
Sound familiar?
You built something real, fast. Now you are about to put real users and real money into it.
"What if I leak my users' data?"
AI tools make apps work. They don't check who else can read your database, whether your keys sit in the browser, or whether one user can see another user's orders.
"What if I get a surprise cloud bill?"
A loop that never stops, an open API anyone can call, a plan with no spending cap. The bill arrives at the end of the month, after the damage is done.
"What if no developer will touch it?"
Every prompt adds code nobody reviewed. One day the AI can't fix its own mistakes, and the developer you call says it would be faster to start over.
What we do
Keep the speed. Add the guardrails.
We are on the side of AI coding. You keep your tools and your pace. We add the checks a senior engineer would put around any production app, so mistakes get caught before your users find them.
Guardrails that fail loudly
Not advice in a document your AI will ignore. Checks that run on every change: secret scanning, database rules tested in CI, branch protection, spending caps and budget alerts.
Fixed prices, fixed scope
You know what you pay before we start. No hourly meter running in the background.
Your app, fixed in place
We fix what you have instead of selling you a rewrite. And we set it up so your AI tools work better on it afterwards, not worse.
Four ways to work with us
Most clients start with the audit. Prices in EUR, excluding VAT.
Start here
Safety Audit
750 €
490 € for the first 5 audits
A written report ranked by severity, the top 10 fixes, a hosting cost review and a 45-minute walkthrough call.
5 working days
Fix it
Rescue Sprint
from 1,500 €
We fix the critical and high findings from your audit, add CI checks and secret scanning, and set spending caps.
1 to 2 weeks
Start right
Foundation
2,500 € to 6,000 €
A new project with authentication, database rules, CI checks, staging and production, budget alerts, logging and AI coding guardrails. Then a handover session.
2 to 4 weeks
Stay safe
Guardrail Retainer
390 €or 790 € a month
A monthly review of what your AI tools changed, security and dependency updates, and a watch on hosting costs. The 790 plan adds pull request reviews within 2 working days.
Ongoing, cancel any month
Book a Rescue Sprint or a Foundation within 30 days of your audit and the audit fee is credited in full.
How it works
The Safety Audit in four steps
One app, one environment, 5 working days. You know the scope and the price before we start.
Step 1
A 15-minute intro call
You tell us what the app does, who uses it and what it runs on. We confirm we can help and agree the scope.
Book a 15-minute callStep 2
Read-only access
You give us read-only access to your code repository and to your hosting and database dashboards, with written permission to review them. We change nothing.
Step 3
The review
We check secrets and keys, sign-in and permissions, database rules, payments and webhooks, dependencies, hosting costs and limits, backups, and how your AI tools are set up to change the code.
Step 4
Report and walkthrough
You get every finding ranked by severity, the 10 fixes to make first, and a 45-minute call where we walk you through it. Fix it yourself, with your AI, or with us.
Stacks
What we cover
We review what AI tools actually produce, and the platforms they deploy to.
Apps built with
Running on
Engineers who run production software
Over 20 years of building
We have built business software for over 20 years. We know the mistakes AI makes because we have seen people make the same ones.
We run our own apps
Since 2014 we have built and run Shopify apps used by merchants around the world, plus our own products. We pay our own hosting bills, so we watch them.
We build with AI every day
Our own projects are built with Claude Code, inside the same guardrails we set up for you. We are not here to talk you out of AI.
Questions
Do you guarantee my app will be secure?
No, and be careful with anyone who does. Nobody can promise that software has no bugs. We find the problems that matter most, fix the ones you ask us to fix, and add guardrails that warn you before the next mistake reaches your users.
What do you need from me?
Read-only access to your code repository and to your hosting and database dashboards, and your written permission to review them. We don't change anything during the audit.
Will you rewrite my app?
No. We fix what is there wherever we can, so you keep the app you know. A rewrite only makes sense in rare cases, and we tell you why before we ever suggest one.
Can I keep building with AI afterwards?
Yes, that is the point. We set your project up so your AI tools work inside guardrails: checks that run on every change and stop the dangerous ones before they go live.
How much does it cost?
The Safety Audit costs 750 EUR, or 490 EUR for the first 5 audits. A Rescue Sprint starts at 1,500 EUR, a Foundation costs 2,500 to 6,000 EUR, and the Guardrail Retainer is 390 or 790 EUR a month. Prices exclude VAT. Book a Rescue Sprint or a Foundation within 30 days of your audit and the audit fee is credited in full.
My app uses a different stack. Can you still help?
Probably. Tell us what you use on the intro call. If it is outside what we know well, we say so and don't take your money.
Not ready for an audit yet?
Start with our free checklist: 25 checks you can run on your app yourself, with a fix for each one.
Find out what your AI left open
Book a Safety Audit. Start with a 15-minute call, and we'll tell you honestly whether an audit makes sense for your app.