A working demo.
Now the hard part.
Built with AI, inherited, or rushed into an MVP? We review the application and help work out what needs attention before real users arrive.
It runs.
What else matters?
Setfive is a small software team in Cambridge, Massachusetts. We review code, business logic, access controls, and deployment around how you plan to use the application, then explain the findings in plain terms.
The prototype works when you drive it.
A happy-path demo doesn't show what happens with missing data, repeated requests, or different user roles. We look at those everyday cases and identify where the implementation needs more work.
AI wrote the code. Nobody really owns it.
Features appeared quickly, but the structure and dependencies are hard to follow. We review what was generated, what can be maintained, and which parts need attention without assuming the entire application should be replaced.
You're about to put customer data into it.
Authentication isn't the same as controlling access to each record. We review how users, roles, secrets, and data are handled, and flag concerns against the way you intend to operate the application.
Launch means more than sharing a URL.
The app needs a deployment process, backups, error visibility, and someone who can support it. We review the environment alongside the code so the plan covers running the application, not just shipping it.
A review you can act on.
We agree on the questions and review scope up front, then walk through the findings by impact and priority. You'll understand what's worth keeping, what needs fixing, and what requires further investigation. We can help implement the changes too.
Show us
what you've got.
Tell us what the application does, how it was built, and what you're worried about. We can discuss a mutual NDA before you share code or access.
You'll talk directly with the engineers doing the work. We'll ask about the workflow, the systems it depends on, and your budget or timing constraints before recommending a next step.
Prefer email? contact@setfive.com
Before the review.
A few things you might be wondering before getting in touch.
Talk about your projectDo you review applications built with AI coding tools?
Yes. We review the resulting application, whether it was written with AI assistance, by a contractor, or by your own team. The important questions are how it works, what it needs to support, and whether the code can be maintained.
What access do you need?
Typically the repository, a description of the important workflows, and information about the deployment setup. We agree on access and handling of sensitive information first. Don't send credentials or customer data through the contact form.
Will you just tell us to rewrite it?
No. We assess what is useful and where targeted improvements may be enough. A larger rebuild can sometimes be justified, but the recommendation should follow from the code and business requirements, not from who originally wrote it.
Is this a security certification or penetration test?
No. An application review can flag concerns in authentication, authorization, and data handling, but it is not a security certification or a formal penetration test. We define the review's scope and limitations before starting.
Can you fix the issues you find?
Yes, when the application and work are a fit. We can scope the highest-priority fixes, improve deployment and documentation, or agree on ongoing engineering support. The review and implementation are separate decisions, so you can use the findings with your own team too.