Security for AI coding
Claude Code, Codex or Cursor, configured with project rules that include security standards, so the AI follows them by default.
Ready to Build
Claude Code, Codex or Cursor, set up safely for your team
Your people already build tools with AI. We give them what a software team would have: version control, automatic security checks, proper hosting and training. They keep building, without putting the business at risk.
Request a Quote
We reply within an hour during UK business hours.
.png?height=28&name=Gunnebo%20Logo%20(1).png){kind=small}
.png?height=28&name=Closer%20Still%20Media%20(1).png){kind=small}
.png?height=28&name=Ecommpay%20Logo%20(1).png){kind=small}
.webp?height=28&name=Tussell%20Logo%20(1).webp){kind=small}
-4npmo6jxod.png?height=28&name=iconsolutionsrgb%20(1)-4npmo6jxod.png){kind=small}
The risks of vibe coding, and how SpotDev removes them
SpotDev Ready to Build sets up a software development lifecycle (SDLC) for businesses whose own people build software with Claude Code, Codex or Cursor. We teach your builder to work like a developer without needing to become one, and install the checks that catch problems before your users do.
Without SpotDev
Without a proper setup
With SpotDev
With Ready to Build
Without SpotDev
Code on one laptop
Nobody else can see it, and nothing records what changed or when.
With SpotDev
Version control the business owns
Every change is recorded in a repository held in the company's name.
Without SpotDev
Changes go straight to live
A small edit can break the tool for everyone, with no way back.
With SpotDev
Changes checked before release
Every change is tested and reviewed before it reaches users, and can be rolled back.
Without SpotDev
Security depends on the prompt
Whether the code is safe depends on what the builder thought to ask for.
With SpotDev
Automatic checks on every change
An AI reviewer and security scans run on every change, whatever the prompt said.
Without SpotDev
Keys pasted into the code
Passwords and API keys travel with the code wherever it goes.
With SpotDev
Secrets kept out of the code
Keys live in a secrets manager and never appear in the code.
Without SpotDev
Hosting picked by trial and error
The app runs wherever it was easiest to get working.
With SpotDev
Proper hosting with backups
Separate test and live environments, with backups, on accounts the business owns.
The tools, systems and processes of a software engineering team
One fixed-price project. Tools are recommended to fit your team, and you pay any subscriptions directly to the vendor.
Version control
A GitHub organisation in your company's name, with protection that stops anyone changing the live version directly.
Automatic quality checks
An AI code reviewer, plus dependency and secret scanning, so problems are flagged before release.
Credential management
Passwords and API keys held centrally in a tool such as Doppler.
Proper hosting and backups
One recommended platform, usually Railway, with separate test and live environments and backups.
Automated documentation
Written so that another engineer, ours or anyone else's, could pick up the work.
How the setup works
- 01
Review
We look at what your team has built so far. Where it holds real data, we start with a Safe to Ship audit.
- 02
Setup
We set up the coding tool, version control, automatic checks, secrets management and hosting.
- 03
Training
We train your builder, and one colleague, using your own app.
- 04
Launch
Your builder ships a real change through the new process, with our engineers alongside.
- 05
Handover
You receive the documentation and confirmation that every account is in your business's name.
Your builder learns to work like a trained developer
Hands-on training in plain English for up to two people, using your own app. No developer background needed.
Version control
What branches and pull requests are, why they protect you, and how to use them day to day.
Reading the checks
How to read the automatic review findings and decide what to act on.
Prompting for secure code
How to ask your AI coding tool for secure code, and what to check in what it gives you.
Releasing and rolling back
How to release a change safely, how to undo one, and when to stop and bring in an engineer.
If your builder leaves your business, your tools stay
Software built by one person is a risk while only they understand it. Ready to Build puts everything in the business's name and documents it.
Own your code
Code sits in a GitHub organisation your business owns, not on a laptop or a personal account.
Secure hosting
Every hosting account, key and password belongs to the business.
Documented for handovers
Anyone you choose, ours or someone else's, can pick up the work from the documentation.
Already built something? Review it first
If your team's tools already hold real data, we review them before the new setup goes in, so you start from a safe base.
Safe to Ship audit
A fixed-price engineering review of one AI-built app, with fixes where they are needed and a sign-off from our CTO.
- Fixed price by risk tier, from £1,500
- Written report and walk-through
- 20% of the fee credited against fixes committed within 30 days
Fixed price, from £4,000
Ready to Build is a fixed-price project agreed before work starts and paid up front. The price depends on the number of apps, tools and integrations involved. Prices exclude VAT.
Ready to Build
From £4,000
Setup and training for one builder and one app.
- AI coding tool configured with security rules
- GitHub organisation your business owns
- AI review and security scanning on every change
- Secrets management
- Hosting with test, live and backups
- Hands-on training for up to two people
Ongoing support
From £750
Ongoing support from SpotDev's engineers
- Coaching for your builder
- Human code reviews
- Hands-on support
Engineers who build with AI every day
SpotDev is an AI and digital transformation consultancy that builds real software, with an in-house, fully remote engineering team. We use AI coding tools in our own engineering every day, so we know where they cut corners.
5.0from 38 client reviews
Claude Developer certified
SpotDev's developers hold Anthropic's Claude Developer accreditation.
Codex Deployment certified
Work with engineers that hold OpenAI's Codex Deployment certification
Cursor-experienced engineers
SpotDev has been building on Cursor for years and it's our in-house IDE.
Built to be handed over
- Cyber Essentials Plus
- Accounts in your name
- Documented for any engineer
- In-house engineers
Common questions
How do we set up Claude Code safely for a business?
Give the people using it what a software team would have: version control the business owns, automatic checks on every change, keys kept out of the code, proper hosting with backups, and training. SpotDev Ready to Build sets all of that up as a fixed-price project, for Claude Code, Codex or Cursor.
Is it safe to let non-developers build software with AI?
It can be, for the right kind of software and with the right setup. AI coding tools build what they are asked for, so the safeguards have to come from the setup around them rather than the prompt. Some software should still be built by engineers, and we will tell you when yours is.
What is an SDLC?
A software development lifecycle is the set of steps a software team follows to plan, build, check, release and maintain software. Ready to Build gives your team the essential parts of one.
Do you provide Claude Code training?
Yes. Training is part of every Ready to Build project, for up to two people, and covers Claude Code, Codex or Cursor alongside version control, reading the automatic checks and releasing changes safely.
Which AI coding tool should we use?
Claude Code, Codex and Cursor are all good choices, and the right one depends on your team and what you are building. SpotDev is Certified in the Claude Partner Network and an OpenAI Select Partner, and we recommend whichever fits.
Can we keep using Lovable?
You can, and some teams should. For tools that are becoming important to the business, we usually recommend moving to a setup you control, because it gives you version control, automatic checks and hosting in your own name. We set out the trade-off for your case.
What will the tools cost us?
You pay any tool subscriptions directly to the vendors, and the cost depends on the tools and the size of your team. We set out the expected costs before the project starts.
What happens if our builder leaves?
The business keeps everything. The repositories, hosting and credentials are in your business's name, and the documentation is written so another engineer can pick up the work.
How much does Ready to Build cost?
From £4,000 for one builder and one app, with training for up to two people. The fixed price depends on the number of apps, tools and integrations. Prices exclude VAT.
When should something be built by engineers instead?
When it handles payments or sensitive data at scale, when other businesses will depend on it, or when it needs complex integrations. For those, our bespoke software service builds it to a fixed scope and price.
Tell us what your team is building
Describe who builds, which tools they use and what the tools do for the business. We reply within one business day with a view on the setup and a fixed price.
SpotDev is an OpenAI Select Partner and a HubSpot Diamond Solutions Partner, and is Certified in the Claude Partner Network. SpotDev is a separate company from OpenAI, Anthropic and the makers of the other tools named on this page, and partner status does not constitute endorsement of SpotDev. OpenAI and ChatGPT are trademarks of OpenAI. Claude is a trademark of Anthropic, PBC. Other product names are trademarks of their owners.