# Work with me

> One app or repository, from $3,500: who can see whose data, keys, logins and payments, speed and code. Ranked report and fix plan in 5 working days.

- Canonical page: https://inspectedbymarko.com/work-with-me/
- Site: Inspected by Marko (https://inspectedbymarko.com/)
- Last updated: 28 October 2026

**You built it fast with AI. I check if it holds.**

My skills read your app’s code, file by file. I check every serious finding myself and rank them by what would hurt your customers first. You get the plan to fix them, in plain words, in 5 working days. From $3,500.

## The inspection at a glance

- **Price:** From $3,500, a starting price in US dollars. Exact price on the call. One invoice from OCTRA, paid by bank transfer before the start. Cancel before the start for a full refund.
- **Scope:** 1 × app or repository, price set by size and data.
- **What it checks:** Who can see whose data, Keys and secrets, Logins and payments, Speed with real users, Code a developer can keep.
- **You get:** Severity-ranked report, Fix plan, Walkthrough video, One-page summary to forward.
- **Turnaround:** 5 working days after the start date.
- **Next start:** Mon 9 Nov 2026.
- **Terms:** the terms v1.0, 22 October 2026, sent with the start date: https://inspectedbymarko.com/legal/audit-terms-2026-10-22.pdf
- **The door:** request a 20-minute call at https://inspectedbymarko.com/work-with-me/#book. Free, 20 minutes, no code access. For apps with paying users.
- **Who it is for:** businesses only. A freelancer or sole trader booking for their work is fine.

## How the work gets done

- **Three times · Think.** Every first conversation is with me. I reply to every request personally.
- **Twice · Prompt.** I do 80 to 90% of the work myself. With my own AI skills and workflows.
- **Always · Inspect.** My team polishes and tests it. You check it against your taste. Your feedback, opinions and preferences decide when it’s done.

Who does the work: me 80 to 90%, my team polishes and tests, you decide when it meets your taste.

## What I check

- **Security:** Where someone could get in, or get data out.
- **Database performance:** Slow queries, missing indexes and what breaks under load.
- **Backend structure:** How the server code is organized, and where it will hurt to change.
- **Frontend structure:** How the client code is organized, and what slows it down.
- **Architecture:** Whether the pieces fit the product you are building.

Not included:
- The fixes. I quote them separately once you have the report.
- More than one app or repository.
- Testing your live app. I read the code; I never touch production.

### Example finding (High): The server trusts the user id the browser sends.

File: `app/api/orders/route.ts`

```ts
export async function GET(req: Request) {
  const userId = req.headers.get("x-user-id")
  const orders = await db.order.findMany({ where: { userId } })
}
```

Issue: Anyone can read anyone’s orders by changing one header. Every finding looks like this: ranked, with a fix and a walkthrough.

## From call to report.

Day 0 is the start date. The report arrives 5 working days later.

1. **Call:** A free 20-minute call. You tell me what’s coming and when. I tell you if an inspection is worth it, the exact price and the next start date.
2. **Confirm:** The same day, by email: the start date and the terms for your inspection.
3. **Invoice:** OCTRA sends the invoice. You pay by bank transfer before the start date. Cancel any time before it for a full refund.
4. **Start:** On the start date, you give read-only access to one repository.
5. **Report:** You get the report, the fix plan, the walkthrough video and a one-page summary 5 working days after the start.

What you get: Four things leave with you.

- **Report:** Every finding, ranked by severity.
- **Fix plan:** What to fix, and in what order.
- **Walkthrough:** A short video through the findings.
- **Summary:** One page to forward to an investor or a new engineer.

## Your code stays yours.

- **Read-only access.** To the one repository you book. Revoke it any time.
- **Never used to train AI.** Your code goes through AI tools only under commercial terms, which exclude training.
- **Confidential, in writing.** Everything you share stays confidential. The terms say so.
- **Deleted after delivery.** Copies are deleted after the report. The terms say exactly when.

The terms v1.0 (22 October 2026, PDF, 7 pages): Authorization to test, confidentiality and a liability limit. They come with your start date, and you accept them before work starts. https://inspectedbymarko.com/legal/audit-terms-2026-10-22.pdf

## Before you book

### How much does the inspection cost?

From $3,500. The exact price depends on the app’s size, how many services it has and the data it holds. You get it on the 20-minute call, before you agree to anything. Fixes are priced separately, after the report.

### Why not just ask Claude to check it?

Do it. It finds real problems. It can’t tell you which one matters for your launch, it can’t stand behind its answer, and the tool that wrote the code shouldn’t grade it. I rank every finding against what’s coming for you, and I sign the serious ones.

### Will you find problems just to sell me fixes?

Every finding has enough detail for any engineer. The fix plan says what to fix first. You can use anyone, including your own team.

### Will you tell me to rebuild?

Only when the numbers say so: when fixing would cost more than 60% of rebuilding. The fix plan keeps what works.

### Who sees my code? Is it used to train AI?

Me and my team, read-only, under the terms you sign. AI tools only under commercial terms that exclude training. Every copy is deleted within 10 working days of the report.

### What if you find nothing serious?

Then the report says so, in writing, and says what holds up. Worth having before a launch or a customer’s security questions.

### How do I pay?

One invoice from my company, OCTRA, in USD, by bank transfer, before the start date.

### How long does it take?

Five working days from the start date. You give read-only access on day 0.

### Do you fix what you find?

Not inside the inspection. After the report your team fixes from the plan, or me and my team fix it in fixed-price sprints.

### Can I book as an individual?

Only for a business. A freelancer or sole trader booking for their work is fine. The inspection is not sold to consumers.

## Tell me what’s coming. I read every request myself.

1. What do you need? An inspection of an app I have / A build / Not sure yet
2. Does the app have paying users? Yes / Not yet (not asked for a build)
3. What’s coming? A launch / First paying users / A customer’s security questions / A raise / A first engineer / Something broke / Something else. When? This month / Next month / In 2 to 3 months / Later, or no date yet
4. What is it built with? Lovable / Bolt / Replit / Base44 / v0 / Cursor / Claude Code / A developer / Nothing yet / Something else
5. Name and work email; if you like, your company, its size and anything else I should know.

Free, 20 minutes, no code access. What happens next:
- An inspection, paying users and a date coming: the calendar opens right here, with your name and email filled in.
- A build, or not sure: I reply within one working day, with a time or a straight no.
- No paying users yet: an honest answer, and the free self-check.

---

Provider and data controller: OneCodeToRuleAll d.o.o. (OCTRA) · Seat: Sinđelićeva 6, 19000 Zaječar, Serbia · Registered with the Serbian Business Registers Agency, no. 21564516 · Tax ID (PIB) 111898813 · marko@inspectedbymarko.com