Skip to content
techpotions

Vibe coding cleanup for apps that worked in the demo and broke in the wild

You built it with AI, it looked finished, and then real users arrived. We take the code you already have, find what is actually wrong with it, and make it something you can keep running. You keep the product. We replace the parts that cannot hold.

  • We read the code before we quote it
  • You own everything, including the parts we rewrite
  • Fixed price once the triage is done
The opportunity

Why this is worth building, and why us.

Vibe coding got you further than anyone expected. A working signup, a dashboard, a payment flow, all in a weekend. Then a hundred people used it at once, or one of them opened the network tab, and it turned out the thing that looked finished was a demo with a domain name pointed at it.

That is not a failure of nerve, it is a failure of the middle. Models are excellent at producing code that runs and indifferent to code that keeps running: no auth boundaries, no database indexes, secrets in the client bundle, and every screen quietly refetching the entire table. A vibe coding cleanup specialist is just an engineer who reads what the model wrote, decides what is worth keeping, and rebuilds the rest properly.

What it does

What we usually find first

06 things
  • 01Database rules that are not enforced: anyone with the browser console can read other customers’ rows
  • 02API keys and secrets shipped to the browser, because the model put them in a client component
  • 03No indexes, N+1 queries, and full-table reads: fine at ten rows, fatal at ten thousand
  • 04Auth that checks the interface but not the endpoint, so the button is hidden and the route is open
  • 05No migrations, no backups, and schema changes made by hand against production
  • 06The same logic copied into six files, so fixing it in one place quietly does nothing
Packages

Priced by how deep the damage goes

We do not quote a cleanup before we have read the code, because the honest range between “a bad fortnight” and “the foundation has to be replaced” is too wide to guess at. The triage below is deliberately cheap and comes off whatever you do next.

Start hereCleanup Triage$2972 days

Give us repository access for two days. You get a written list of what is broken, ranked by what will hurt you first rather than what is quickest to fix, plus a fixed quote for the work itself. Credited back in full against any engagement you start within 30 days.

Book a free call
  • Stabilise
    $2,497
    2 weeks

    It is live, it is leaking, and it needs to stop leaking this month.

    • The security holes closed first: data access rules, exposed keys, open endpoints
    • The queries and pages that fall over under load, found and fixed
    • Error tracking and logging wired in, so the next failure is visible rather than reported by a customer
    • Backups and migrations set up, so a schema change stops being a gamble
    • A written handover of what we changed and what we deliberately left alone
    Book a call about Stabilise
  • Most chosen
    Production Rebuild
    $6,997
    5 weeks

    The product is right and the foundation underneath it is not.

    • Everything in Stabilise, then the core rebuilt on a stack that holds: Next.js, TypeScript, Postgres
    • The data model redesigned once, properly, instead of patched around
    • Auth and permissions enforced at the server, not just hidden in the interface
    • Tests on the paths that cost you money when they break
    • CI and deploys that are boring: push, check, ship, roll back
    • The same product your users already know, on code your next engineer can read
    Book a call about Production Rebuild
  • Cleanup Retainer
    $997/mo
    Monthly

    You are still shipping with AI and want someone senior reading it.

    • Review of what you and your tools ship each week, before it reaches users
    • A running list of the debt we are choosing to carry, and why
    • Fixes for the things that turn up in production
    • A monthly call on what to build next and what to stop doing
    • Cancel any month, no notice period
    Book a call about Cleanup Retainer
  • We read the code before we quote it
  • You own everything, including the parts we rewrite
  • Fixed price once the triage is done
  • No rebuild sold when a repair will do

Not every vibe-coded app needs a rebuild, and we will tell you when yours does not. Plenty need one focused fortnight and then years of ordinary maintenance. The ones that genuinely need the foundation replaced are usually the ones where the data model was wrong from the first prompt, and that is visible in the triage rather than six weeks into an invoice.

01

Why AI-written code fails in exactly the same places

Every cleanup we do finds a version of the same short list. That is not a coincidence, it is a property of how the code was produced. A model optimises for the request in front of it: make this page work. Nothing in that request implies that the endpoint behind the page should check who is calling it, that the table should have an index, or that the key should live on the server.

So you get software that is locally correct and globally wrong. Each screen works. The system does not. And because all of it runs, nothing tells you until the moment it matters: a bill, a breach, or a launch where the database gives up at forty concurrent users.

02

What we keep, and why keeping it matters

The instinct with inherited AI code is to throw it away, and it is usually the wrong instinct. What you built encodes real product decisions: which fields you actually need, what the flow is, which features users ignored. That knowledge cost you weeks and it is not written down anywhere.

So we treat the app as a specification rather than a codebase. The screens, the flows, and the data you have collected stay. The parts that decide whether it survives, the schema, the auth boundary, the queries, the deploy path, get rebuilt on purpose. You do not lose the product. You lose the fragility.

03

The bill nobody mentions until it arrives

What catches most people is not the engineering, it is the cost of running code nobody supervised. A page that refetches the whole table on every render is invisible while you are the only user. At a thousand users it is a database bill growing faster than your revenue, and the fix is not a bigger plan, it is an index and a rewritten query.

The same applies to model spend. AI features written by AI tend to send far more context than the task needs, retry without a cap, and reach for the largest model available because that is what the example used. Cleaning that up is often the fastest money we save anyone.

04

Who this is honestly for

This works when there is a real product underneath: people using it, or a launch date that matters, and code that broadly does what you meant. It is a repair job, and repair jobs need something worth repairing.

It is the wrong service if you have a prototype with no users and no evidence anyone wants it. Cleaning that up is paying engineering prices to harden a guess. In that case we will point you at a scope sprint and a proper first build instead, which costs less and answers a more useful question.

FAQ

Common questions.

  • 01What is a vibe coding cleanup specialist?

    It is a recent name for an old job: an engineer who takes code produced quickly, usually by AI, and makes it safe to run. In practice that is code review, a security pass, a data model correction, and the operational work (migrations, backups, monitoring, deploys) that nothing in the original build had a reason to include. The title is new. The work is the oldest part of the profession.

  • 02Can you fix an app built in Lovable, Bolt, Replit, or v0?

    Yes, and those are most of what we see. All of them can export or give you access to a real repository, which is all we need. Whether the fix is a repair or a rebuild depends on the data model rather than the tool: which platform you used tells us less than what the first few prompts decided about how your data is shaped.

  • 03How much does it cost to fix a vibe-coded app?

    $297 for the two-day triage, which tells you the real number. After that, $2,497 for a two-week stabilisation or $6,997 for a five-week production rebuild. Most apps that are live with users land in the first tier. The triage exists precisely so nobody pays rebuild prices for a repair job, and it comes off the invoice if you go ahead.

  • 04Will you have to start from scratch?

    Rarely, and we would rather not. Your screens and flows are real product decisions worth keeping. What usually gets replaced is underneath: the schema, the auth boundary, the queries, and the deploy path. Your users should not be able to tell anything happened, except that it stopped breaking.

  • 05Can we keep using AI to build after you are done?

    Yes, and most of our clients do. That is what the retainer is for. The difference afterwards is that the codebase has tests, types, and a shape the model can follow, so what you generate next fits the system instead of fighting it. Cleanup is much cheaper the second time, when there are guardrails.

  • 06Is our data at risk right now?

    Possibly, and it is the first thing we look at. The most common finding by a distance is a database that trusts the browser, which means any user can read every other user’s records with the developer tools open. If you hold real customer data and nobody has checked that, the triage is worth doing this week rather than next quarter.

Find out what is actually wrong with it

Send us the repository or the platform link and a sentence about what is going wrong. We will tell you whether it is a fortnight or a foundation, and what it costs, before you commit to anything.

No call required · reply within a day

  • A real person replies, usually same day
  • No sales sequence, no automated nurture
  • Cleanup Triage is credited back if you go ahead