Guiding Ventures

Internal tools · built with AI · made secure

Internal tools built with AI, made secure.

A vibe-coded tool is software built fast with AI coding tools such as Lovable, Bolt, Cursor or Claude Code. We make yours safe for company data, or build one with login, roles and a security review from the start. You pay once, then a fixed yearly check.

Price
from £1,690
Once, excl. VAT · from €1,990
Done in
2 to 4 weeks
2 weeks to secure, 4 weeks to build
Then
1 check a year
£420 (€490) a year, excl. VAT

For businesses only. Prices exclude VAT; for UK businesses no German VAT is charged (reverse charge).

The problem

Why are internal tools built with AI often unsafe?

  • 01

    Anyone with the link gets in

    AI tools build what you ask for, and often skip logins and user roles nobody asked for.

  • 02

    Keys in the code

    Passwords and API keys end up in the code or the browser, where anyone can read them.

  • 03

    Nobody checks it again

    The tool keeps running for years while its software packages go out of date.

What you get

What do you get, whichever option you pick?

Both options cover everything below. Anything extra is quoted before you commit.

  • Login and user roles

    Only your people get in, and each person sees only what their role allows.

  • Data rules

    Who may read and change which data, enforced on the server, not only in the screen.

  • No secrets in the code

    Passwords and API keys moved into the hosting provider's secret store.

  • A security review

    Checked against a written list based on the OWASP Top 10, the common standard for web app risks.

  • Up-to-date packages

    Outdated software packages with known holes updated before handover.

  • Backups

    Your data is backed up, and a restore is tested once.

  • Your accounts

    The tool runs on hosting and database accounts in your name.

  • A written report

    What we found, what we fixed and what is left, in plain words.

Options

Which option fits your tool?

One price, paid once. The yearly check is the same for both: £420 (€490) a year.

Which option fits your tool?

Secure the tool you have

£1,690

Once, excl. VAT · €1,990

You built it with AI; we review it and fix what makes it unsafe for company data.

  • Review of one internal tool against our written checklist
  • Up to 2 days of fixes for what we find
  • Login, roles, secrets, packages and backups put right
  • Written report of findings and fixes
  • Done in 2 weeks

What we're building

Which software products do we build and run ourselves?

Five products we built and run ourselves. All of them are live.

Mussie Haile

Who you'll work with

Hi, I'm Mussie.

I run Guiding Ventures from Berlin. We build and run our own software products, and we teach teams to work with AI. When you book a call, you talk to me, not a sales team.

Mussie Haile

Founder, Guiding Ventures

How it goes

How does it work, from call to a secure tool?

  1. Day 1

    Scoping call

    45 minutes about the tool, who uses it and which data it touches.

  2. Week 1

    Review or build

    We review your tool, or start building the new one on your accounts.

  3. Week 2–4

    Fixes and checks

    We fix what we found, or finish the build, then run the security review.

  4. Every year

    Yearly check

    We check logins, access, packages and backups again, and send a short report.

Is it for you?

Is this offer a fit for you?

A good fit if

  • Your team built an internal tool with AI and now real company data goes into it
  • You need a small internal tool and want it built fast without cutting corners on security
  • You want someone to check it again every year

Not a fit if

  • You need a certified penetration test or an ISO 27001 audit
  • The tool is public and sells to customers (that needs a larger review)
  • You're buying as a private person (this offer is for businesses only)

Questions

What do people ask before they book?

What is a vibe-coded tool?

A vibe-coded tool is software built by describing it to an AI coding tool such as Lovable, Bolt, Cursor or Claude Code, often without a developer checking the code.

Will the tool be 100% secure afterwards?

No one can promise that. We check and fix against a written list based on the OWASP Top 10, and the report says exactly what was checked.

What does the yearly check include?

Logins and user access, outdated packages, secrets and backups, checked again once a year, a short report, and up to 2 hours of fixes. It costs £420 (€490) a year.

Where does the tool run?

On hosting and database accounts in your name, for example Cloudflare or Supabase. You keep full access.

What about company and personal data?

Before we start we agree in writing which data the tool holds and who may see it, and we only work on accounts you give us access to.

Make the tool your team relies on safe to rely on.

A 20-minute call to check which option fits. If neither does, we'll say so.

[email protected]

Question 1 of 4