Production-readiness for AI-built apps
We fix exposed Supabase data, leaked keys and platform lock-in. Then we move you onto AWS infrastructure that lives as Terraform in your repo. Fixed price, fixed scope, and we never keep admin access to your cloud.
offramp is free and open source (MIT). It runs in your browser, and your code never leaves it. Prefer the command line? Get it on GitHub.
Anyone can update or delete rows
public.orders · policy USING (true)
service_role key shipped to the browser
src/lib/supabase.ts · VITE_SUPABASE_SERVICE_KEY
JWT signing secret committed
backend/.env · still in git history
Sign-in runs on the builder's auth service
Users cannot log in after a move
Teams we have worked with
AI app builders hide the database, the sign-in and the deployment. That is where the risk sits, and it is what we check first. Read what we found in 190 apps.
The browser talks straight to Supabase. If row-level security is off, or a policy just says true, anyone can read, change or delete your users’ data.
Secrets committed to the repo or compiled into the JavaScript bundle. A service_role key in the browser bypasses every policy you wrote.
Sign-in, AI calls and preview URLs that only work on the builder’s platform. Move the app and users cannot log in.
Services
Every engagement has a written scope and a fixed price before we start. Everything we build lands in your repository.
About 1 week
$2,500–$5,000
For apps with paying users. We run offramp, then fix what it finds: row-level security on every table, secrets moved server-side and rotated, sign-in hardened, backups and monitoring in place. You get a written report and pull requests to your repo.
2–3 weeks
$8,000–$15,000
A clean AWS setup as Terraform in your own GitHub: separate accounts, single sign-on, logging, encryption, and deploys over GitHub OIDC, plus the evidence your auditor will ask for. You run the one-time setup; we never hold standing admin credentials.
Monthly, cancel anytime
$1,500–$3,000/month
Your part-time platform team: patching, cost and security reviews, incident help and small changes, all as reviewed pull requests to your repo. Cancel anytime; everything stays yours.
See pricing and FAQs for what each service includes.
Customers
“Went from 3 months of manual evidence collection to automated SOC2 reports. Our auditor was impressed — we passed on the first try.”
Tarun Aleti
Co-founder & CTO, PartRunner
97%
faster audit prep
“We avoided hiring a $180K DevOps engineer. DevOps Genie handles 80% of what we’d need them for — infrastructure, security, incidents.”
Bikram Bharti
CTO, BuildFactory
$180K
saved annually
“Dropped our critical findings from 47 to 3 in the first month. The auto-fix PRs are surprisingly good.”
Vaibhav Agarwal
India Head, AmpUp
94%
fewer critical findings
Run offramp on your repository, in your browser or from GitHub. If it finds something you would rather not fix yourself, we will scope it with you and give you a fixed price.
