App hacked, down or leaking data? I start within 24 hours.
A Rescue is for an app that is broken right now: down, exposing data, someone using your keys, or payments that stopped. It costs $490. I stop the damage first, then tell you in writing what happened and what to do next.
- I start within 24 hours, or your money back
- Collaborator access only, never your passwords
- $490 counts toward a Sprint within 14 days
Do these four things now, before you hear from me
- If a secret key may have leaked (OpenAI, Stripe secret, Supabase service role), rotate it at the provider. Removing it from the code isn't enough.
- If customer data is exposed through your database, turn on row level security for that table in Supabase, even if it breaks a page for now.
- Don't delete logs, tables or deployments: they show what happened.
- Write down when you first noticed and what you saw.
How a Rescue runs
- Now
Pay $490
Through Stripe. The intake form opens straight after: what you saw, when, and access.
- Within 24 hours
I start
First job: stop the damage. Rotate keys, close the hole, restore service.
- Same week
Written account
What happened, what was exposed and since when, what was fixed, and what you may need to tell customers.
- Your call
Stop it happening again
A list of what else needs fixing, with a fixed quote. The $490 comes off a Sprint.
The promise
I start within 24 hours, or you get the $490 back
The clock starts when you pay. If you cancel before I start, you get it all back too.
Nothing is hidden from you
Every change goes into your own accounts, where you can see it. You get a written account of what I found and did, and a list of keys to rotate.
Refund policy. Not an emergency? A Launch Check ($299, 48 hours) finds problems before they become one.
Who you're hiring
I'm Max Zeshut, a full-stack developer. I build and run 16 live sites of my own, on Next.js, Postgres, DigitalOcean and Stripe, and I build with AI coding agents every day. I know how fast they get you to a demo, and exactly which parts they leave out. You deal with me from the first message to the last fix.
Some of the sites I run, live right now
- ppl.studioAI app: sign-in, Stripe billing, Postgres
- plana.weddingWedding planning tools with Stripe checkout
- advent.center1,100+ advent calendars reviewed and priced
- peptides.academyReference site with a dose calculator
- dupe.softwareSoftware sold once for $99
- gtasix.howGame companion guide with interactive tools
One price: $490
Paid up front through Stripe, so I can start without waiting on an invoice. It counts in full toward a Ship-it Sprint booked within 14 days.
Before you pay, you can email [email protected] with one line on what's happening.
Questions
What counts as an emergency?
The app is down, customer data may have leaked, someone is using your keys, or payments stopped working. If you're not sure, it probably counts.
What do you do first?
Stop the damage: rotate keys, close the hole, restore service. Then I write down what happened, what was exposed and what you may need to tell your customers.
Does it count toward a Sprint?
Yes. The $490 comes off a Sprint booked within 14 days.
Is it safe to give you access?
You add me as a collaborator on GitHub, Supabase and your hosting, so you can see everything I do and remove me in one click. I never ask for passwords, I don't copy your customers' data anywhere, and when I'm done you get a list of keys to rotate.
Who does the work?
I do, myself, every check and every fix. That's why there are only three Sprint slots a week.
Where are you, and how fast do you reply?
I work from Europe (CET) and reply to email within a few hours on working days. The 48 hours of a Launch Check start when I have access; a Rescue starts within 24 hours, any day.
Something broken right now?
I start within 24 hours of payment, stop the damage first, and tell you in writing what happened. $490, counted toward a Sprint.