# Before Ship

> Before Ship provides evidence-led security reviews for AI-built and vibe-coded web applications, from a £49 public-site snapshot to a scoped £999 penetration test and remediation from £2,500.

Before Ship reviews applications built with tools such as Lovable, Bolt, Replit, Cursor and Claude Code. Reviews can cover Supabase and Firebase access rules, authentication, authorisation, exposed secrets, dependencies, APIs and deployment configuration. Testing only begins after ownership or written authorisation and scope are confirmed.

OWASP Top 10:2025 and UK NCSC secure-development guidance are review references, not certifications or endorsements. A security review reduces uncertainty but does not guarantee that an application has no vulnerabilities. Active testing is never performed without written authorisation. Denial-of-service, social engineering, physical access and unauthorised third-party systems are excluded from the penetration test by default.

## Services

- [Security snapshot](https://byteassure.dev/snapshot): £49 passive review of the public application; no repository access.
- [Launch security review](https://byteassure.dev/launch-review): £149 focused live-site and read-only source-code review with one priority-fix recheck.
- [Deep security review](https://byteassure.dev/deep-review): £750 broader manual review for applications handling payments, sensitive data or complex permissions.
- [Web application penetration test](https://byteassure.dev/penetration-test): £999 test of one agreed small web application and its in-scope API surface, with written rules of engagement and one retest.
- [Security review and remediation](https://byteassure.dev/remediation): from £2,500 for a bounded review, implementation of agreed priority controls and verification.
- [Security and performance architecture review](https://byteassure.dev/architecture-review): from £5,000 for threat modelling, non-functional requirements, security architecture, resilience and performance-test strategy.
- [ISO/IEC 27001:2022 readiness support](https://byteassure.dev/iso-27001): from £7,999 for a bounded ISMS implementation and independent-certification-readiness engagement; certification is not included.

## Optional

- [Full service and scope reference](https://byteassure.dev/llms-full.txt)
- [Pricing, process and FAQs](https://byteassure.dev/)