Custom applications · 22 July 2026 · 7 min read
Built in Cursor or Bolt but stuck on localhost? Production needs auth, env separation, CI/CD, monitoring, and security baseline — fixed scope with Launch Safe.
AI coding tools got your app to "works on my machine" in weeks. Production asks for secrets management, database backups, HTTPS, auth hardening, and a deploy path your co-founder can run when you are on leave.
Most prototypes stall not from missing features — from missing infrastructure discipline. Ship and FC-10 Launch Safe exist for that gap.
Run northark.ai/scan on your staging URL — automated grade plus severity counts in minutes. If findings are rough, FC-05L audit lite or full FC-05 before Launch Safe.
Security before marketing spend on launch.
Production hosting on agreed stack (GCP, Supabase, Azure, Vercel). Domain, SSL, environment separation, CI/CD baseline, go-live checklist, and handover runbook.
Ten business days fixed scope, $9,500 AUD, 50% on signature.
Optional Operate for monitoring and patches. Feature work routes to Build sprints — not infinite scope in launch package.
Production readiness PDF checklist covers 25 items for self-assessment.
David Goulding delivers directly — same person on fit call and production deploy. Onsite when cutover or training needs it.
See Ship service and vibe-coded security audit article for related reading.
