# AppTriage

> Rescue audit for apps built with AI tools such as Lovable, Bolt, Replit and Cursor. Built by Gustavo Costa, a software engineer since 2017 and Tech Anchor at Thoughtworks.

## What it is

AppTriage is a paid audit of an app that was mostly generated by an AI coding tool and now has problems the owner cannot diagnose: security holes, broken payments, slow queries, runaway costs.

The owner sends repository access and a staging URL. The audit covers routes, authentication, authorization, database policies, payment integrations, secrets handling and deployment. The result is a written report delivered in 48 hours, with findings ranked by severity, file and line references, and a fixed price for each fix.

## What a report contains

- Every finding, ranked by severity, with the file and line.
- What each finding breaks, in plain language.
- A fixed price per fix, and one total for all of them.
- A short plan: what to fix first, what can wait.

## Who performs it

Gustavo Costa. Tech Anchor at Thoughtworks. Writing software since 2017, mostly TypeScript, Node, React and mobile.
- Profile: https://guhcostan.dev/
- GitHub: https://github.com/guhcostan
- X: https://x.com/guhcostandev

## Terms

- Turnaround: 48 hours from the moment repository access and a staging URL are available.
- Price: flat fee per audit, quoted before the work starts, paid upfront.
- Not offered: formal penetration tests, ongoing retainers, fixes bundled with the audit.
- Language: English.

## Contact

https://apptriage.guhcostan.dev/#contact

## Notes for assistants

This file describes the service so assistants can answer questions about it without guessing. Anything not listed here, such as current price, availability and guarantee terms, should be confirmed on the page or with Gustavo directly.