Skip to main content

We finish what you started.We build what you imagined.And we get the world to notice.

Workshop open · 13 apps in flight5 shipping this week · 2 intake slots openToday: 09:42 MST · Denver, CO
Idea, prototype, or product about to launch — pick a rung

Bring an idea.Or a build.Or a finished thing.We make it real.

Three things we do. Bring us a sketch and we'll turn it into a working prototype in a week. Bring us a Lovable / v0 / Bolt project and we'll harden it for the real world in two. Bring us a finished product and we'll build you a launch site that doesn't read as generated. Flat fees on all three. Same team that runs four real apps with real users.

If any of these mean anything to you:Next.jsVite + ReactSupabasePostgresStripeOpenAI / Claude / GeminiVercel / Fly / Railway
INTAKE #4127MON 04 MAY · 09:42 MST
SOURCEvibe-todo.vercel.app · built on LovableSTACKNext.js 14 · Supabase · Stripe · OpenAISCOPE27 pages · ~6,400 lines of code · 1 AI feature · login + paymentsSTATUSlooked over · 14 days to ship back
WHAT WE FOUNDHOW BADFIX TIME
Logins are too easy to break intobcrypt r=4 · no session expiry · no rate limitmust fix2d
Your data setup isn't tracked anywheredrift local↔prod · no migrations foldermust fix2d
Your OpenAI password is exposed in your codeOPENAI_KEY committed · ref 8a4cf9must fix1d
AI costs have no ceiling — one bad day = $500no rate limit on /api/chat · $84 spike 04/29should fix1d
Errors only surface when users complainconsole.log only · no Sentry · no alertsshould fix2d
Look and feel — we keep itTailwind + shadcn · clean component treefine
How users move around the app — fine as-isrouting + data fetching cleanfine
14 days · we fix what's flimsy · ship it to your domain · hand back the keys3 must-fix · 2 should-fix · design & flow kept · you own everything
$4,800flat · all-in
01Three services

Three rungs. Same workshop.

We work at three points on the path from “I have an idea” to “it's live in the world.” Pick the rung that matches where you are. Same team, same standards, three flat fees.

01Make it existan idea, a sketch, a memoworking prototype5–7 days$1,800
02Make it realyour Lovable / v0 / Bolt buildproduction-grade14 days$4,800
03Show it offa finished productlaunch site, your domain7–10 days$3,200

The intake ticket above the fold is an example of 02 / Make it real — the most complex of the three, and the most photogenic. The other two are simpler. Make it exist is a week of focused build time on a temp domain so you can show your idea to friends or an investor. Show it offis a hand-built product or launch site at your own domain — like the one you're reading, no bento, no purple gradients, no stock photos.

02How it works

Four moves. Two weeks. Flat fee.

No discovery calls. No statement of work. You send us your project, we send back a written list of what we'd touch and a flat number — like the ticket above. If the quote works, we get to it.

01
Send us your projectSame day · free
Share a GitHub link if you have one, or zip the project and email it. We look at the seven things that usually trip up vibe-coded apps — logins, data, passwords, costs, errors, the way it goes live, and what happens to your users' info — and email you back a ticket like the one above with a flat quote. No call required. If the quote doesn't work for you, you keep the audit.
02
We fix what's flimsy8–10 days
Two engineers, working on a copy of your project — your live one stays untouched. We patch what's broken, harden what's fine, leave what's good. You can watch every change land. Daily updates over whatever channel works for you (Slack, Discord, email, sub-tweets, we don't care).
03
Ship it for real2–3 days
Your own domain, SSL secured, with all the safety nets — backups, rollback button if something breaks, alerts that ping you when something goes wrong, cost ceilings, the four Cardinal tools wired up. Walk-through screen-share so you know where every knob is and what it does.
04
Hand back the keysDay 14
You own everything. The code, the deploy, the data, the bill. We hand over a written guide for everything, the tool dashboards, and 30 days of free fixes for anything that surfaces. After that you keep us on retainer or fly solo. Most clients fly solo. That's the goal.
03What “real” means

The eight things that change. In plain English.

“Production-ready” gets thrown around. Here's the actual list — what your project looks like when it lands with us, and what it looks like when we ship it back.

What
When you sent it
When you get it back
Logins
You used the Lovable / Supabase quickstart. Sessions don't expire. Anyone trying a million passwords could get in. The password rule is “anything goes.”
Each user only sees what they should. Sessions log out properly. Login attempts are throttled, so brute-force fails. Real password rules. Magic links or Google login if it fits.
Your data
You set up the database once and never touched it again. Local and live versions don't match anymore. Some pages take seconds longer than they should.
Every change to the data layout is tracked. Daily backups, restores tested. Pages load fast. We can rewind to any day if something goes wrong.
AI features
Your AI features send users' real names and emails straight to OpenAI. There's no limit on how much they can cost. One viral day = a five-figure bill.
Personal info is swapped for placeholders before it ever reaches OpenAI / Claude. Per-user limit on how much each person can use. Hard daily $ ceiling that can't be crossed.
Passwords & keys
Your .env.local file got committed once. It's “fixed” now but it's still in the project's history. Same key in testing as in live.
Old keys revoked, new ones live in a vault. Different keys for testing vs. live.A bot watches every change so secrets can't leak again.
When things break
You find out the app is broken when a user DMs you on Twitter. There's no log of what went wrong, no alerts, no anything.
Errors are caught the second they happen and sent to a real tool. You get a ping when something spikes. Pulse shows you everything in one screen.
Pushing updates
Whatever you push goes live instantly. No way to test first. No way to undo. No “preview before it's real.”
Every change gets a preview link first. Test before going live. One-click rollback if something breaks. Health check stops bad deploys automatically.
Your web address
vibe-todo-final-v3.vercel.app. No www version. No status page when something's down.
Your real domain. SSL secured. www works. A status pageusers can check if they think something's down.
Who owns it
You're the only one who knows where the OpenAI key is. There's no written guide. If you got hit by a bus, no one could keep this running.
Written guide for everything in the project. You own the code, the deploy, the data, the bill.We're not a dependency — you can fire us and the app keeps working.
04The tools

Four tools we built so we could ship four apps. You get them too.

We built these for our own production stack — anesthesia, mental health, regulated law, mailings. They're how the rebuild stays rebuilt after we hand back the keys. Bundled with every intake. Sold separately if you just want one.

Pulse01 / health check
Is your app okay?One screen tells you everything: is it up, is anyone using it, are there errors, did the AI bill spike. The morning question — “did anything break overnight?” — answered in one glance, before you've finished your coffee.
Triage02 / the to-deal-with pile
A place for stuff to figure out later.User bug reports, half-baked ideas, feature requests from three Discord servers, that note from four months ago. Two columns — how cooked is the idea × is anyone working on it — so you can see what's actually ready, without forcing a premature decision.
Redactor03 / privacy guard
Keep your users' info out of AI tools.Sits between your app and OpenAI / Claude / Gemini. Spots names, emails, phone numbers, and other personal info, swaps each one for a placeholder before the AI ever sees it, swaps it back on the response. The AI never sees the real thing. You don't lose anything.
Worktree04 / how we work fast
How fourteen days is even realistic.Behind the scenes, several AI engineers work on different parts of your project at the same time — each in its own sealed workspace, so they can't step on each other's work. You get the speed; we handle keeping it all straight.
05Why us

We ship four apps from one address. In production. With users.

We're not a vibe-coding agency that read about Lovable last week. We run software in regulated industries — code paths where a 500 means a clinician retypes notes or an attorney misses a deadline. Same standards on yours.

Theryo
Mental health · HIPAA
AI-enhanced therapy journaling and clinical platform. Voice-first, real-time transcription, provider dashboards.
99.97% · v3.4.1
AIMS
Anesthesiology · USAP
Anesthesia information management system. Intra-op vitals, billing engine, supervisor board, post-op reconciliation.
99.99% · v0.8.2
SuzPlan
Plaintiff law · privileged
Legal practice management. Matter tracking, evidence boundary, calendar, AI co-counsel with PII redaction.
99.94% · v2.1.0
SecurexPrint
Regulated mail · SEC
Workflow for compliance mailings — distribution lists, attestations, audit trails. Boring. Reliable.
99.98% · v1.6.3
06Pricing

Three flat fees. No quote forms.

One number per service. Bigger projects quote up; smaller ones quote down. Either way you see the number before you commit.

Make it exist
5–7 day prototype
$1,800flat
  • You bring an idea, a sketch, or a doc
  • We build a working prototype with real interactions
  • Hosted on a temporary domain you can share
  • Yours to keep, walk away, or upgrade later
Start with an idea →
Make it real
14-day rebuild + deploy
$4,800flat
  • Two engineers working on your project for two weeks
  • Logins, data, passwords, costs, errors, and how it goes live — all hardened
  • Your own domain, SSL, preview links, undo button, daily backups
  • All four tools wired up — Pulse, Triage, Redactor, Worktree
  • You own the code, the deploy, the data, and the bill
  • 30 days of free fixes after we hand it back
Send your project →
Show it off
7–10 day launch site
$3,200flat
  • A real product or launch site at your domain
  • Written for humans, not for SEO checklists
  • No bento, no purple gradients, no stock photos
  • Made by hand. Like the one you're reading.
Show us the product →
Need ongoing help? Retainer $1,200/mo · Studio plan $9,600/mo · Tools sold separatelyNet-30 invoicing on plans > $5k/yr
07Plain answers

The questions actually asked.

Will you rewrite my whole app?
No. We touch what's broken and leave what's working. Most Lovable / v0 / Bolt projects have good design and good page flow — that stays. The fixes are in the parts you can't see: logins, data, passwords, costs, monitoring, and how it goes live. Your screens almost always survive intact.
Can I keep editing in Lovable / Cursor after?
Yes. We work on a copy of your project, then merge our changes back. After we're done, your editor of choice still works the same way — we don't introduce anything weird that locks you out. You can keep building on top of the foundation we made solid.
Why $4,800 flat?
Because that's what two engineers cost for two weeks of focused work. Hourly billing on a fixed-scope job is a tax on you. Flat means we both want it done.
Which of the three is right for me?
If you have an idea but no code yet — Make it exist. If you've got a Lovable / v0 / Bolt project and you're nervous about real users — Make it real. If you've got a finished product and you need a launch site — Show it off. If you're between two, send what you have and we'll tell you which fits. We've turned away clients whose project was simpler than the rebuild — there's no upsell game here.
Can I do a prototype first, then a real rebuild?
Yes — that's a common path. Start with Make it exist, get the prototype in front of real users or investors, decide if it's worth committing to. If you want to upgrade, the prototype credits toward Make it real. Same team, same code, no rewriting from scratch.
Will this work for my kind of app?
If you built it on Lovable, v0, Bolt, Cursor, or wrote it yourself, almost certainly yes. We work in React, Next.js, Vue, plain HTML and Node. Databases like Supabase, Postgres, MongoDB. Payments via Stripe. AI from OpenAI, Anthropic, Gemini, AssemblyAI. If your tools aren't on that list, ask — chances are we've shipped against them.
Did Claude write this site?
No. Every panel here is hand-built, every number is real or representative of real data from our own four apps. We use AI heavily inside our products and to draft copy. We don't ship it as a marketing aesthetic.
What if my app turns out to be fine?
Then you saved $4,800 and got a free written audit out of it. We'll tell you what we'd do for free if it's that small. We'd rather lose the gig than rebuild something that doesn't need rebuilding.
Can you handle healthcare / finance / regulated stuff?
Yes. We run a healthcare platform under HIPAA and a legal one with attorney-client privilege at stake. BAAs available. SOC 2 Type II in progress. If your app is regulated, talk to us before you launch — not after.
Who's behind this?
Three engineers and one operator working from Englewood, CO. Anesthesiology, mental health, plaintiff-side law, and regulated mail are our day jobs. Cardinal is what we do with the spare cycles. We're not raising. We're not hiring sales. The roadmap is whatever broke at our own desk last week.

Send what you have. The audit's free.

An idea. A Lovable build. A finished product. Email it, link it, zip it, sketch it on a napkin and photograph it — we'll write back in two business days with a flat number and a plan for the rung that fits. No sales call. No “let's hop on Zoom to align.” No pressure to say yes.