PatchAndShip services and pricing
PatchAndShip sells two fixed-price fix plans, plus a Launch Pack add-on. Security Fix is $149 one-time: RLS fixes on all tables, storage bucket policies, a key scan of the client bundle, key rotation guidance and a report. Fix & Deploy is $249 one-time and adds production deploy, host env vars, auth redirect URLs, custom domain, SSL and a smoke test.
Plain text version: /docs/pricing.md
Plans
| Plan | Price | What's included | Turnaround |
|---|---|---|---|
| Security Fix | $149, one time | RLS fixes on all tables; storage bucket policies; key scan and rotation guidance; short report. | Within 48 hours of working access |
| Fix & Deploy | $249, one time | Everything in Security Fix, plus production deploy; env vars and auth redirects; custom domain and SSL; smoke test of key flows. | Within 48 hours of working access |
| Launch Pack add‑on | $149 once, or $99 a month | Launch posts, SEO copy and a directory list. | Not covered by the 48‑hour guarantee |
The guarantee
Security Fix: every critical issue on our checklist fixed within 48 hours of working access. Fix & Deploy: fixed and live on your host within 48 hours. Otherwise, a full refund if you ask within 14 days of purchase.
- The 48 hours count from when we receive working access to your app. The clock pauses while we are waiting on you.
- “Critical” means only the issues on our published checklist: Row Level Security (RLS) disabled or misconfigured, public storage buckets holding private files, exposed secret keys (in the client bundle, repo or public env variables), and, on Fix & Deploy only, misconfigured environment variables or auth redirects.
- “Live” (Fix & Deploy only) means deployed on the host you choose. If you use a custom domain, its DNS settings depend on you.
- Email patchandship@gmail.com within 14 days of your purchase to request a refund under the guarantee. Approved refunds are processed within 5 business days.
- If you don't provide working access within 30 days of your purchase, you get a full refund.
- The Launch Pack, one-time or monthly, is not covered by the 48-hour guarantee.
- Monthly plan: not covered by the 48-hour guarantee. You can cancel anytime by emailing patchandship@gmail.com. Cancellation takes effect at the end of the current billing period, and we do not give partial refunds.
Full terms: Refund Policy.
What one order covers
The Fix & Deploy package ($249) deploys one app to Vercel or Netlify, or keeps a Lovable or Replit app on that platform's own hosting with your domain. Each order covers one app, one Supabase project (or one Node app) and one deploy target. No new features. Not a penetration test or compliance certification. Custom backends and VPS/Docker setups are quoted separately.
Apps with more than 25 user‑defined tables are declined or quoted separately. More than one Supabase project needs separate orders.
Free mini check
PatchAndShip's free mini check is passive: it looks only at the public homepage, its scripts and its security headers (for exposed secret keys, missing headers and publicly listed storage links), and nothing else: no database queries, no logins, no changes. It returns a one‑page summary within 24 hours. The app owner (or an authorized person) must consent. Ask at patchandship@gmail.com or use the free check form.
How to order
- Buy Security Fix, $149
- Buy Fix & Deploy, $249
- Buy Launch Pack, $149 once
- Buy Launch Pack, $99 a month
Secure checkout by Stripe. After you pay, we email you the intake form.