30 minutes · free
Free audit
You share your screen and show us the app. We tell you where the biggest risks are, and the advice is yours to keep whether we work together or not.
Production Readiness
We Make Your AI-Built App
Ready for the Real World.
Avalou is a London engineering studio. We take apps built with AI tools, a freelancer or a small team and make them ready for paying customers. You keep your features and your design, and we fix what sits underneath.
Free 30-minute audit · Fixed price · You approve each change
Problems a Demo Will Not Show You
An app can look finished and still have gaps that only appear once customers arrive. These are the ones we find most often.
Access
A customer logs in and can see another customer's orders.
Payments
A customer is charged twice, or a failed card payment goes unnoticed for weeks.
Data
A backup runs each night but nobody has tried to restore it.
Uptime
The app goes down overnight and you first hear about it from a customer.
Secrets
Your payment keys sit in code that anyone visiting the site can download.
Change
You fix one screen and a feature on another screen stops working.
Abuse & privacy
A bot creates 10,000 accounts and you receive the hosting bill.
If you are not sure which of these apply to you, the audit will tell you.
Book the audit
When clients usually call us
You are about to launch
Real customers are coming and you want to find the problems before they do.
An investor or customer has questions
A due diligence request or a security questionnaire needs answers you can stand behind.
You are selling the app
A buyer will want to know who owns each account and whether the app runs without you.
Something has gone wrong
The app is down or payments are failing, and you need it stable before anything else.
What We Check
The full sprint covers 13 areas. When a check fails we fix it and run it again until it passes.
At the end we give you a readiness report that you can forward to a customer or investor. If a check does not apply to your app, the report says so and gives the reason.
Logins and who can see what
We test each page and API so a customer can only reach their own data. We also test password resets, sessions and admin access.
Secret keys and account ownership
We move keys out of the code and replace them. We confirm your business owns the hosting, domain, payment and email accounts.
Security and abuse protection
We add rate limits and bot protection so automated sign-ups and scripted attacks cannot run up your bills.
Your data and backups
We set up automatic backups and restore one to prove it works. We also make database changes safe to run on live data.
Payments, refunds and disputes
We stop double charges and handle failed payments, refunds and disputes. Your records then match your payment provider.
Errors and recovery
We capture errors with enough detail to fix them, and we write down what to do when something breaks.
Releases
We give you a test copy of the app and a one-step way to undo a bad release.
Alerts
We send uptime and error alerts to your phone or inbox, so you hear about a problem before your customers do.
Speed under load
We find and fix the slow pages and queries, then test the app with realistic traffic before a launch.
Safe changes
We add automated tests around the parts that matter most. They run on each change, including changes your AI tools make.
Email delivery
We set up your domain so sign-up, password and receipt emails reach the inbox instead of spam.
Privacy and personal data (UK GDPR)
We record what personal data you hold, where it lives and who can reach it. You will also know how to delete it on request.
Handover and support
We write the documentation and the readiness report, then support you for 30 days after handover.
Ways to Start
13 areas · about 2 weeks
Full readiness sprint
We work through all 13 areas and finish with a readiness report you can send to a customer or investor.
Scoped on the call
One area
If payments or an investor question is the priority, we start there. You can add more areas later.
Reply within 1 working day
Urgent help
If the app is down or payments have stopped, contact us. We make it stable first and talk about the rest afterwards.
How It Works
Free Audit
You show us the app on a call and we explain the risks we can see.
Agree Scope
You choose the full sprint or one area. We agree a fixed price and a date before we start.
Fix & Verify
We test each change on a copy of your app. Your live app only changes once you approve it.
Hand Over
We hand over the work and a report that lists each check, what we did and how we tested it.
After handover we fix any problem in our work for 14 days at no cost. For 30 days you can ask us anything about what we changed.
Questions
Do I need to rebuild my app?
No. You keep your features and your design, and we strengthen the parts underneath.
I do not write code. Is that a problem?
Not at all. We explain each change in everyday language and you approve it before it goes live.
Do I need to share my code for the audit?
No. You show us the app on screen, and we only ask for access if you decide to go ahead.
My app is already live. Can you still help?
Yes. We test changes on a copy of the app first, so your customers carry on as normal.
My app was not built with AI. Does that matter?
No. Apps built by freelancers and small teams have the same gaps, and we check them the same way.
Can I keep building with AI afterwards?
Yes. We leave automated tests in place, so if a new change breaks something you find out before your customers do.
Is my app too small for this?
If people use it now, or will soon, then it is worth doing.
What happens if a check fails?
We fix it and run it again. If we cannot resolve something, the report lists it as open work.
Book a free audit
The call takes 30 minutes and you speak to Sean, our founder. If you are interested then we will follow up with a fixed price.
Last updated