Your QA team. Without hiring.
A QA engineer tests every release you ship, a cybersecurity specialist tests for vulnerabilities. A report with a verdict by the next business day. A fixed monthly price, cancel any time.
From $990 a month. Want to try first? Bug testing — $299, credited to your subscription.Release 1.4: report
Verdict: not yet — fix 2 bugs first
- CriticalPromo code applies twice — 20% off
- HighCart is empty after sign-in
- SecurityPromo codes can be guessed with no limit
Each with a screenshot, steps and an AI prompt. A security questionnaire letter every month.
We test products on any stack
From “it works on my screen”
to “let’s release this.”
An independent team tests every release — before your customers see it.
You send a link.
The first month starts with bug testing as at $299 (up to 25 screens) and vulnerability testing as at $349. It gives you a regression suite that belongs to you.
ONE LINK. THE REGRESSION SUITE IS YOURS.You write: “the release is ready”.
A regression of the main scenarios and what is new — a report with a verdict by the next business day. Every bug with a screenshot, steps and an AI prompt.
REPORT BY THE NEXT BUSINESS DAYYou fix. We retest.
A retest of the fixed bugs after every report. Every month — vulnerability testing and a letter for your clients’ security questionnaires.
A RETEST AFTER EVERY REPORTLooks good.
But does it hold up?
We go through your app the way your customers will — and find where they get stuck.
Can people use it?
Sign-up and login, the main action, payment, e-mails, the account and admin. After updates: did anything old break?
See a sample report ↓Web applications
We test your website or web app on a computer (Chrome) and a phone (Safari): sign-up, the account, payment, e-mails and admin.
How we test web apps ↗︎Mobile applications
We test your iOS or Android app on a real phone: installation, the main actions, permissions, offline behaviour and payment with a test card. We choose the devices, on the latest system versions.
How we test iOS and Android apps ↗︎Working doesn’t mean
secure.
An app can work perfectly — and still hand other people’s data to anyone who knows where to look. A cybersecurity specialist tries to break into it the way a hacker would.
Other people’s data
Can one customer open another’s orders, profile or files? We test the database access rules — Supabase RLS, Firebase rules — and files in storage.
CVE-2025-48757: 170 OF 1,645 LOVABLE APPS HAD WRONG DATABASE ACCESS RULESKeys and admin
Keys and passwords that ended up in the app’s code. Admin panels and APIs that open without login.
ESCAPE · OCTOBER 2025: 400+ EXPOSED SECRETS IN 5,600+ APPS BUILT WITH AIPayments and login
Can paid access be unlocked with a fake webhook? Is the number of login attempts limited, so a password can’t be guessed?
NON-DESTRUCTIVE: ONLY YOUR APP, ONLY WITH YOUR PERMISSIONIncluded in every subscription tier and in the “Bugs + vulnerabilities” package, or order it on its own. This is not a pentest: deep security testing (a pentest) is a separate service at $990.
PricingMore than a scan.
A clear next move.
The full report: the verdict, what and how we tested, results by scenario, every bug and vulnerability with steps to reproduce, a screenshot and an AI prompt, the retest.
Choose a plan| Scenario | Passed | Failed |
|---|---|---|
| Sign-up and login | 12 | 2 |
| Catalogue, cart, payment | 11 | 3 |
| E-mails | 9 | 1 |
| Customer account | 9 | 3 |
| Admin | 10 | 1 |
Pressing “Pay” twice creates two orders and charges twice
- Open the payment page /checkout.
- Enter the test card 4242 4242 4242 4242.
- Quickly press “Pay” twice.
$24.00 · Succeeded · 14:02:11
$24.00 · Succeeded · 14:02:11
On the payment page, disable the “Pay” button and show a spinner from the first click until the request finishes. In the create-payment function, make the request idempotent: generate one key per cart and return the existing payment when the same key arrives again. Add a test: two clicks within 300 ms create exactly one order and one charge.
6 more bugs and 3 vulnerabilities — with steps, screenshots and prompts
Open the full report →You build with AI.
We test like professionals.
We work with AI too — and pair it with the experience of QA engineers and cybersecurity specialists. We go through your app by hand on real devices, like your customers, and look for holes like an attacker. Every bug comes back as a ready prompt for your AI tool.
QA engineers
They walk every flow by hand on real devices: a desktop browser, an iPhone, an Android phone. Every bug comes with a screenshot and steps to reproduce.
EVERY BUG WITH A PROMPT FOR YOUR AICybersecurity specialists
They look for ways into other users’ data, keys and the admin panel. Only your app, only with your permission, without harming data.
NON-DESTRUCTIVE TESTINGYour project manager
One contact in the project chat: agrees the test plan, answers questions and keeps the dates. You write — a person from the team answers.
WE ANSWER IN THE CHAT ON BUSINESS DAYSA fixed monthly price.
A whole QA team.
Every tier is for one app, up to three platforms: web, iOS and Android; each platform of a release is its own test. Every tier has a letter for your clients’ security questionnaires, carries unused tests over to the next month (up to a month’s norm) and leaves you a regression suite that belongs to you. Yearly — 12 months for the price of 10 — or monthly. Cancel any time with one button in your project: a monthly payment simply stops, and with yearly billing the paid year runs to its end.
Start
For a team of 1–5 developers.
$9,900 billed yearlyPaid by invoice · SWIFT, USDor $990 monthly by card — cancel any timebilled monthly
≈ $206 per release test, billed yearly≈ $248 per release test
Choose Start- 4 release tests a month
- A report with a verdict by the next business day
- Vulnerability testing every month
- Chat answers within 1 business day
- A constant QA engineer · a monthly summary
Deadline guarantee: a late report does not count
Growth
For a team of 3–10 developers.
$19,900 billed yearlyPaid by invoice · SWIFT, USDor $1,990 monthly by card — cancel any timebilled monthly
≈ $166 per release test, billed yearly≈ $199 per release test
Choose Growth- 10 release tests a month
- A report with a verdict by the next business day
- Vulnerabilities every month, deeper each quarter
- Daily automated tests of the 5 main scenarios
- Chat answers within 4 business hours
- A constant QA engineer · a monthly summary
Deadline guarantee: a late report does not count
Team
For a team of 8–20 developers.
$34,900 billed yearlyPaid by invoice · SWIFT, USDor $3,490 monthly, also by invoicebilled monthlyPaid by invoice · SWIFT, USD
≈ $145 per release test, billed yearly≈ $175 per release test
Choose Team- 20 release tests a month
- Release by 12:00 Kyiv time (5:00 ET) — report the same day
- Vulnerabilities every week, a deep security test each quarter
- Daily automated tests of 10 scenarios
- Chat answers within 2 business hours
- A constant QA engineer and cybersecurity specialist · a weekly summary
Deadline guarantee: a late report does not count
Compare with hiring
An in-house QA engineer in the US
≈ $12,700 a month with taxes and benefits
- Salary alone — ≈ $8,700 a month (BLS median, May 2025)
- Search, interviews, time off and sick days — on you
- Vulnerability testing — another specialist
piperlink · Growth
$1,659 a month, billed yearly≈ 7× less
$1,990 a month, fixed≈ 6× less
- 10 release tests a month
- A QA engineer and a cybersecurity specialist
- The report by the end of the next business day
- Cancel any time
Sources: BLS, Occupational Outlook Handbook; BLS, Employer Costs for Employee Compensation (salary ≈ 68.5% of the employer's cost). OOH ↗︎ · ECEC ↗︎
Want to try first? Bug testing — $299, Bugs + vulnerabilities — $499. Subscribe within 30 days and the price is credited to your first month. Order bug testing ↗︎
Update testing — $149. For an app we have tested before. Order update testing ↗︎
Vulnerability testing — $349. Without bug testing. Order on its own ↗︎
Options for one-off tests. One more platform — +$149. 25 more screens — +$149. Rush report within 2 business days — +$99.
More services. Accessibility testing, deep security testing, production setup, app care and daily automated tests. All services ↗︎
A few good
questions.
Why not hire a QA engineer?
The median QA engineer salary in the US is $104k a year (BLS, 2025), about $150k with taxes and benefits — and you still have to find one. The subscription is from $990 a month: the first month starts with bug testing and release tests come from its second week; it comes with a QA engineer and a cybersecurity specialist at once, and you can cancel any time. The test cases and the regression suite stay yours.
How does the subscription work?
Choose a tier: Start — $990 a month (4 release tests), Growth — $1,990 (10), Team — $3,490 (20); every tier takes up to three platforms and has a constant QA engineer. The first month starts with bug testing as at $299 (up to 25 screens) and vulnerability testing as at $349, and from the second week half the tier’s release tests; then the full norm every month. When a release is ready, you write in the project chat and get a report with a verdict by the next business day. Vulnerability testing — every month. Paid monthly from the first month, cancel any time with one button; unused tests carry over to the next month.
What is a release test?
A regression of up to 10 main scenarios and what is new or changed in the release — up to 5 screens or one feature — on one platform. A bigger release takes another test for each further 5 screens or feature, or 10 regression scenarios; the same release on two platforms takes two tests. Release tests run one at a time: the next starts after the previous report. After every report, a retest of the bugs you fixed.
Can I pay for a year?
Yes, and it costs less: 12 months for the price of 10 — Start $9,900, Growth $19,900, Team $34,900 a year (2 months free). Every month of the year has the same release tests, carry-over and vulnerability testing. It is paid by invoice, a bank transfer in US dollars (SWIFT); the next year by a new invoice. Cancel the annual payment any time: the paid year runs to its end. If you want to end the year early, we refund the year’s payment less every month begun at the monthly price.
What if a report is late?
The deadline guarantee applies: a test whose report is late does not count against your month. The deadline runs from your request in the chat, once the build and access are there; business days are Mon–Fri, 9:00–19:00 Kyiv time.
Can I try it first?
Yes. Bug testing — $299, or Bugs + vulnerabilities — $499. Subscribe within 30 days and we credit the package price to your first month; the package becomes its first test.
Which apps do you test?
Any web or mobile app on any stack — written by your team or built with AI tools (Cursor, Claude Code, Lovable and others). For iOS and Android a link to the App Store, Google Play or TestFlight is enough. We do not test desktop apps yet.
What will I receive?
For every release — a report with a ship-or-not verdict: every bug with priority, environment (device, browser, OS), steps to reproduce, expected and actual result, a screenshot and a ready AI prompt. It arrives in the project chat as a file that is easy to forward to your developer or team. Every month — vulnerability testing and a letter for your clients’ security questionnaires. For one-off bug testing — a test plan within 1 business day of payment, a report within 5 business days of it (a rush one in 2) and one free retest within 14 days.
How do we communicate?
In the project chat — no calls. On the subscription we answer by tier: within 1 business day, 4 or 2 business hours (Mon–Fri, 9:00–19:00 Kyiv time).
What is vulnerability testing?
Break-in attempts, the way a hacker would: opening other people’s data, getting around the database access rules (Supabase RLS, Firebase rules), finding keys and passwords in the code, reaching the admin panel and API without login, pulling other people’s files from storage, forging payments (webhooks) and limited password guessing on test accounts. The attempts are non-destructive and only with your permission. It is not a pentest: deep security testing (a pentest) is a separate service at $990. Price: $349 on its own, $499 in the “Bugs + vulnerabilities” package; included in every subscription tier.
Will you fix the code for me?
Yes, if you want. After a one-off bug test you can order fixes right in the chat: up to 10 bugs $190, up to 30 $490; we fix them in a separate branch (we need access to the code) and check every fix with a retest. Or you fix them yourself or with your AI tool — every bug comes with a ready prompt — and we retest the bugs you fixed once, for free, within 14 days of the report. The release decision is yours.
What access will you need?
Only the link to your app. If you cannot get in without a login, you add a test login to an encrypted field after payment. Never share real customer passwords or your main admin account.
Will you sign an NDA?
Yes — on request we sign an NDA before testing starts; write in the project chat. Even without one, everything you share is confidential under the offer: test logins are encrypted and deleted 14 days after the project ends, and we never publish findings.
Do you test with real data and real payments?
Preferably on a staging environment or with test accounts. We check payments with a test card in your payment provider’s test mode (Stripe, WayForPay and others) — no real charges and no mass e-mails. If you only have the live app, the test plan sets what we may do so your customers are not affected.
What language is the report in?
The language you ordered in: English or Ukrainian.
Can I get an invoice?
Yes. A year and Team monthly are paid by invoice in US dollars (SWIFT) from the start. For other payments you receive an order confirmation by e-mail right away, and an invoice and a statement of services are sent on request — write your company details in the project chat.
What happens if my app goes down?
On the subscription, once a month we diagnose an outage in your live app: the symptoms, available logs, the likely cause and a fix prompt. We start within 4 business hours (Mon–Fri, 9:00–19:00 Kyiv time). There is no 24/7 on-call, no code repair and no guaranteed time to fix. Watching a live app day to day is App care ($290 per 30 days) on your own hosting.
Do you guarantee there are no bugs left?
No. We give you evidence within the test plan. Testing does not cover every possible device and scenario, is not a security certificate and does not guarantee App Store or Google Play approval.
How do I order and pay?
Choose a tier or a package, paste your app link and sign in with Google or with the code we e-mail you. You pay the fixed price in US dollars by card on the secure WayForPay page — the card is charged the hryvnia (UAH) equivalent at the rate at the moment of payment, the WayForPay page shows the amount before you confirm, and your card’s bank may convert at its own rate and add a fee; a subscription is paid monthly with your separate consent — or, for a year and Team monthly, by invoice in US dollars (SWIFT). After payment your project chat with our team opens — we write the test plan. Nothing is charged without your decision.