Open for work Get an audit

// code audit & rescue — engineering report, 2026

Your AI-built app -works in the demo. +works in production.

I rescue broken vibe-coded apps — Lovable, Bolt, v0, Cursor, Replit — and make them secure, tested, and deployable. When you'd rather build it right the first time, I do full-stack web end to end.

Book a code audit → See how it works
The problem is real 45%

of AI-generated code ships with security flaws — Veracode, 2025

Audit-first Diagnosis before repair

See what's wrong and what it costs — before committing a dollar.

Solo You work with the engineer

No project manager, no hand-offs to a junior. Direct line, direct answers.

Built with
PythonFastAPITypeScriptReactNext.jsPostgreSQLPlaywrightDockerGCP

01 — Services

What you actually get

★ Flagship

AI Code Rescue

Your app was built with Lovable, Bolt, or v0 — and now it's fragile. Auth is broken, the database is exposed, deploys fail, and you don't know why.

I start with a paid code audit — a recorded walkthrough plus a written diagnosis — so you know exactly what's broken and what it costs to fix, before spending a dollar on repairs. Then I fix, harden, or refactor. And I tell you honestly whether to fix, refactor, or rebuild.

✓Security & auth hardening ✓Database & API stabilisation ✓Deploy & CI that actually works ✓Tests so it stops breaking
Book a code audit →
Core

Full-Stack Web & MVPs

Production-grade apps end to end: Python (FastAPI), TypeScript, React, Next.js — with real auth, real database, real deploy, and real tests.

Built right the first time. Not a demo that falls over when someone clicks the wrong button.

Fast

Automation & Bots

Playwright scraping, Telegram bots with AI, workflow automation, API integrations, Excel/Sheets pipelines.

The repetitive work, handled reliably. Priced by outcome, not hours.

2026

AI-Ready & Machine-Readable Sites

JSON-LD, llms.txt, agents.json — so your site is found and understood by AI agents and LLMs, not just search engines. Implemented here. Available as a service.

02 — Selected Work

Exhibits A–E

Things I've built. Results they delivered.

ExhibitA

SaaS Dashboard Starter

Next.js 16 · Prisma · Stripe · NextAuth · Recharts

A production-ready SaaS foundation: authentication with role-based access, Stripe billing, customer lifecycle management, real-time MRR tracking, API key management, and revenue analytics.

→ Ships as a template that saves 40+ hours on any SaaS project.

Live demo →
ExhibitB

Bar Loyalty Platform

React 19 · Vite · Gemini AI · Express · Motion

An end-to-end loyalty platform for hospitality: points system, drink menu, live leaderboard, location-based features, push notifications, and AI-powered personalisation.

→ Adapts to any food & beverage brand in under a week.

See the demo →
ExhibitC

Lumière Hotel

Next.js 16 · Framer Motion 12 · dark/light mode

A premium, animated hotel landing with rooms, amenities, gallery, testimonials, and a full SEO layer — sitemap, robots, manifest. Lighthouse 97+. Fluid motion, zero jank.

→ Delivered in 5 days, dark mode and all pages included.

Live preview →
ExhibitD

Clothing Store

Next.js 16 · shadcn/ui · Recharts · Zod

Complete e-commerce frontend: product catalog, cart, checkout flow, and an admin panel with sales analytics. Full Radix UI accessibility.

→ Production-ready in a week. No no-code platform lock-in.

See it live →
ExhibitE

AI Code Rescue — Security Fix

Anonymised client sample · video walkthrough available

Before — vibe-coded

  • ×SQL injection via string concatenation
  • ×API keys committed to git
  • ×No rate limiting on login
  • ×No HTTPS enforcement

After — 3 days

  • ✓Parameterised queries + ORM
  • ✓Secrets in .env, history cleaned
  • ✓Rate limiting + lockout
  • ✓HTTPS + HSTS · Lighthouse 34 → 96
Full audit report →

03 — Process

No surprises. No scope creep.

No "it should be working" moments.

Step 1 · from $500

Paid audit

Before I touch a single line of your code, we do an audit. I record a 30–60 minute walkthrough of your codebase, map every critical issue, and write a prioritised diagnosis.

You get a clear answer — fix / refactor / rebuild — and what it costs. Whether we work together after that is your call.

Step 2

Scope & fix

Based on the audit, I put together a fixed-price scope: exactly what gets done, what it costs, and when it ships.

No hourly surprises. Milestones: 50% upfront, 50% on delivery.

Step 3

Delivery + handoff

Working code in a tagged GitHub release. A video walkthrough of what was built and how to maintain it.

7 days of post-delivery support for anything in scope.

04 — Under the Hood

The problem, in other people's words

"45% of code generated by AI coding tools contains at least one security vulnerability."

— Veracode, State of Software Security, 2025

"Entrepreneurs who have built apps with AI coding tools are now hiring contractors to fix what they've broken."

— Gizmodo, 2025

05 — About

The engineer on the other end

I'm Stan Kapts — a solo full-stack engineer based in Israel.

I've been building production systems long enough to know what breaks — and why the code that looks fine in the demo fails the moment real users show up.

When you work with me, you work with me. Not a project manager who hands it to a junior. Me. The engineer.

Honest about timelines. Direct about what I can and can't do.

Python · FastAPI · TypeScript · React · PostgreSQL · Playwright · Docker · GCP · shipping AI integrations (Claude, Gemini) that actually work · fixing the mess AI coding tools leave behind

06 — Let's talk

Not ready to commit?
Start with an audit.

I'll look at your code, record a walkthrough, and tell you exactly what's wrong — in plain English, with a cost estimate.

If you decide not to work with me after that, you keep the diagnosis. No strings attached.
Book an audit → Email me