The App Launch Audit is a fixed-price review that tells you exactly what stands between your AI-built app and a safe launch, delivered as a clear report and a 60 minute walkthrough 5 business days after we have full access.
We work with Replit, Lovable, Bolt, Cursor, v0, Base44 and Claude Code.
Get a free health check See the App Launch Audit
From A$2,800 plus GST. Fixed price. Report 5 business days after full access.
| App size | Price | Delivery |
|---|---|---|
| One app up to 50,000 lines of code, up to two repositories | A$2,800 plus GST | 5 business days after full access |
| One app from 50,000 to 150,000 lines of code | A$4,750 plus GST | 5 business days after full access |
| Larger platforms | Fixed quote before payment | Confirmed with your quote |
Choose your tier and send a booking enquiry. We confirm the scope, arrange the NDA and issue an invoice with payment instructions before work starts. If your app is larger than 150,000 lines, we confirm a fixed quote before you pay anything.
We send a short access checklist covering your repositories, hosting, database and key services. We ask for read-only access wherever the platform allows it, plus test logins for each user role.
We work through your main user journeys and review security, code, integrations and your production setup. The 5 business day clock starts once we have full access.
You receive the full report and we walk you through it on a 60 minute call. We remove our access at delivery.
Fix it yourself, have us fix the critical items, or have us finish the app. There is no obligation to continue with TPR Media.
| Area | What we check |
|---|---|
| User journeys | Sign-up, login, onboarding, core tasks and checkout, tested end to end on mobile and desktop, including error states. |
| Launch scope | What must work on day one, what can wait and what should be cut. |
| Security and data access | Supabase row level security, Firebase security rules, exposed API keys and secrets, and the risks in the OWASP Top 10. |
| Authentication | Sign-up, login, password reset, sessions, roles and server-side permission checks on every protected route. |
| Architecture | How the app is structured, where business logic lives and whether it will cope with growth. |
| Data model | Tables, relationships, constraints and whether the data can be trusted and migrated. |
| Code quality | Duplication, dead code, error handling, dependencies and how safely a developer can change it. |
| Payments | Checkout, subscriptions, refunds and verified webhooks that keep payment status accurate. |
| Performance | Page speed, slow queries, heavy bundles and behaviour under realistic load. |
| Deployment | Environments, environment variables, build process, custom domain, backups and rollback. |
| Testing | What is tested, what is not, and the minimum tests needed before launch. |
| AI feature risks | Prompt injection, data leaking through prompts, missing rate limits and runaway token costs. |
If you choose a remediation project of A$10,000 or more within 30 days, your audit fee is credited against it.
Use the report, backlog and paste-in prompts to work through low-risk fixes at your pace.
TPR Media resolves Critical and High findings so you can launch safely.
We take the agreed scope through testing, documentation and launch.
Send us your app link and the thing that worries you most. We will reply with the first three things we would investigate. No code access needed and no obligation.
You provide access to your code repositories, hosting, database and key services such as payments and email, plus test logins for each type of user. We send a short checklist after booking and ask for read-only access wherever the platform allows it. The 5 business day timeline starts once all of that access is in place.
We deliver the report 5 business days after we have full access to everything on the access checklist. We then book your 60 minute walkthrough so you can ask questions and understand each finding. Larger platforms above 150,000 lines receive a fixed quote, and we confirm their timeline with that quote before payment.
We count the application code in your repositories and exclude dependency folders, lock files and generated build output. Up to 50,000 lines in up to two repositories is A$2,800 plus GST, and 50,000 to 150,000 lines is A$4,750 plus GST. If you are unsure, send the repository link and we confirm your tier first.
No. The audit is an assessment, so we do not change your code while we review it. You do get paste-in prompts for your AI tool to handle the low-risk fixes yourself. If you want TPR Media to make the fixes, we quote that as a separate remediation project after the walkthrough, with your audit fee credited where eligible.
No review can guarantee that software is free of every defect or vulnerability. The audit finds and prioritises the issues most likely to hurt you at launch, explains each risk in plain English and gives you a clear fix. It gives you a far better picture than launching without any independent review of the app.
Then we tell you, and we show you why. The report includes a rescue-or-rebuild verdict with the cost of each path, so you can compare them side by side. Sometimes a partial rebuild of one weak area is the best answer. You decide, and there is no obligation to use TPR Media for either path.