Built by one engineer who's tired of watching vibe-coded apps leak.
bleek is a one-person agency that scans, audits, and hardens apps built with Lovable, Bolt, Cursor, v0 and Claude Code. Named founder, no offshore team, no ghosting.
Ali Saeed
Founder & engineer
Ali is the engineer behind bleek. Production background in React, Node and PostgreSQL, fluent in the vibe-coding stack (Lovable, Bolt, Cursor, Claude Code, Supabase). He started bleek after watching one too many founders launch a working MVP only to leak Supabase keys, ship apps with RLS off, or process payments through unverified webhooks.
Speed is the wound, not the cure.
AI tools made shipping software 10x faster. They did not make it 10x safer. Most vibe-coded apps go live with the same security defaults the AI was trained on — and those defaults are written for prototypes, not production.
bleek is built on one belief: most apps don't need a rewrite. They need a focused tune-up. The right person looking at the right twelve places. We do that. We explain what we found, in plain language, and we ship the fix as a pull request you approve.
We don't take retainers we can't fulfill. We don't outsource. The founder reviews every change.
Read-only by design
We never run exploits. We probe. We observe. We report.
Your code stays yours
Free scan needs no access. Deep scan needs no access. Human-tier fixes are pull requests you approve.
Named founder
Ali Saeed runs this. No agency, no offshore team, no ghosting.