Preview: the audit is not on sale yet. No payment is taken and no email is sent; a request is stored and read by hand.
Handover Audit by AMMO
From vibe-coded to hand-over-ready.
Built your app with Lovable, Bolt, Replit, Cursor or Claude Code? We review it, fix the worst of it and hand you a clear report, so a developer can take it over with confidence.
Request an auditHow it works
Tell us about your app
Share the URL or the repository. Read-only access or a zip is enough.
We audit and fix
Scans plus a human review of security, reliability, data, cost and maintainability. Small fixes arrive as a pull request.
Hand it over
A plain-English report, a HANDOVER.md for the next developer and a short path to hosting on ammo.host.
Pricing
Quick Check
€99
Up to 5,000 lines · 3 business days
- Secrets, auth and dependency scan
- Five-page report
- Top five fixes as a list
Handover Audit
€199
Up to 15,000 lines · 5 business days
- Full report
- Up to 2 hours of fixes as a pull request
- HANDOVER.md
- Move to ammo.host
Handover Pro
€299
Up to 25,000 lines · 5 to 7 business days
- Everything in Handover Audit
- Up to 5 hours of fixes
- Database and environment cleanup
- 30-minute debrief and 14 days of follow-up
Prices exclude VAT. Larger apps get a quote. Fewer than three real issues found means a full refund.
What the report looks like
Executive summary. Amber: ready to hand over once two critical issues are fixed.
| ID | Severity | Where | Finding | Status |
|---|---|---|---|---|
| S-01 | Critical | src/lib/supabase.ts:4 | Service-role key shipped to the browser | Fixed in PR |
| S-02 | Critical | Database policies | Row-level security off on the orders table | Fixed in PR |
| R-03 | High | api/checkout.js | No error handling around the payment webhook | Open, about 30 minutes |
| C-04 | Medium | agents/summarize.py | Model called in a loop without a limit | Open, about 1 hour |
Sections: Summary · app snapshot · security · reliability · data · cost · maintainability · findings · fixes applied · handover pack · deploy to ammo.host · next steps
Questions
Do you need write access to my code?
No. Read-only access or a zip is enough. Fixes come back as a pull request or a patch.
Is this a penetration test?
No. It is a best-effort expert review. We say plainly where a full penetration test makes sense.
What happens to my code afterwards?
It is deleted 30 days after delivery. We are based in the Netherlands and sign an NDA on request.
Do I have to host on ammo.host?
No. The handover pack works anywhere. ammo.host is the shortest next step for apps built with agents.
Request an audit
Then keep it running on ammo.host
Hosting for apps built with agents: static sites and Python apps, Postgres. Starter is €5 per app per month, Pro €19 per month. Audit customers get 14 days free.
Sign in with an email link, create an API key, then the agent deploys.