Asked on almost every call
The questions founders ask before handing us a working prototype, answered the way we answer them on a call.
It can run, until it can't. Lovable and similar builders are excellent at proving an idea, but the result usually ships with client-side-only authorization, no tenant isolation, no backups, no monitoring, and code you don't fully own. Real users and real data punish those gaps. We keep your working product and rebuild the foundations under it so it holds.
We take a working prototype, whether it came from Lovable, another no-code tool or AI, and rebuild it as a production product: your own code repo, hardened security, an AI engine over your data, billing, monitoring and CI/CD. Apps, web apps, websites. At the end, it's all yours.
Yes, fully. The code lives in a GitHub repo under your account from day one, and full ownership of the code and IP transfers to you on final payment. No platform lock-in, ever.
Every project covers six engineering domains: code ownership & decoupling, data & infrastructure, security & permissions, the AI engine & core logic, environments & deployment, and monitoring & maintenance. Depth scales with the product you pick. See the services page for details.
Every project is a fixed written quote, built from the real hours it takes and valid 14 days. Websites start at ₪4,500, web apps at ₪12,000 and applications at ₪25,000. Full pricing.
A website runs about 1 to 2 weeks, a web app about 3 to 6 weeks, and an application about 4 to 12 weeks. The written work plan locks the timeline before we start. If we run late through our own fault, you're credited 5% per week, up to 25%.
Four milestones: spec & approval → design → development → delivery. Payment follows progress, 40% / 30% / 30%, and nothing gets built before you've approved exactly what's being built. The process.
We stay on as your technical partner: monitoring, bug fixes and security updates from ₪450/mo, an extended plan with monthly dev hours, or on-demand work at ₪170–200/hr. Plus a 14–30 day bug-fix warranty on every delivery.
Security is the core of the work: row-level security on every table, server-side authorization, 2FA for admins, secrets kept server-side, audit logs and rate limiting. Details on the security page.
Never. Every client reaches only their own records. The isolation is enforced in the database itself, and we verify it before every release with cross-account tests using two real accounts.
Yes. The whole engagement, from calls and specs to documentation and the product itself, runs in English, Hebrew or both. The written quote comes in the language you prefer.