Production Risk Review · one-off
Production Risk Review
Will Pickeral, William Belle LLC · support@williambelle.co
You built something that works. Whether it is safe to put in front of people is a different question, and nothing you used to build it will answer it.
$950, fixed, paid before I start. It comes off a Secure Cloud Deployment booked within 30 days.
What You Get
A written report, in plain English, covering:
- How people get in, and what they can reach once they are in. The most common failure in an app built this way is that anyone who signs in can read everyone's records.
- Where your data sits and who can read it. Including whoever your AI tool gave you hosting from.
- What your app is built on that has a publicly known flaw, and which of those are being used against apps right now.
- What happens when something fails. Whether anything is backed up, whether you would know it had gone down, and what it would take to get it back.
Each one says what it would take to fix and roughly what that costs, in the order I would do them. You can hand the report to another developer and they can work from it.
What It Costs
$950. One price, agreed before I start, and it does not move with what I find.
If you book a Secure Cloud Deployment within 30 days, the whole $950 comes off it. The review is the first thing that deployment does anyway, so you are not paying for it twice.
Fixing anything is quoted separately. You see the price and decide. Nothing gets started on the assumption that you would have said yes.
What It Is Not
I do not fix anything under this. The report tells you what is wrong and what each fix would take, and every one of them is yours to price out with me, with someone else, or not at all.
It is also not a certificate. Nobody can look at an app and promise it will pass a customer's security review, and a report that claimed to would be worth less than one that does not.
Who This Is For
An app you built with an AI tool that is close to going live, or already live and you have started to worry. It is worth most before the first real user, and worth having at any point after.
If your app holds health records, financial and tax data, or legal matters, say so — the rules of your field change what I look at, and a Compliance-Ready Deployment is the thing this leads to rather than the deployment above it.
If you would rather see whether we are a fit first, the free 20-minute review costs nothing. This is the same judgment, written down and gone through properly.
Getting Started
Tell me about your app, and I'll come back with what the review would cover and when I can start.