Your data rules
Can User A see User B's data?
The demo never tries. Someone will.
“How do I make sure User A can never see User B’s data?”
Posted on r/lovable
Fractional CTO services
You built it. You validated it. It looks like it's working.
That part is real. It's also the part above the water.
Your keys
What ships to the browser?
And what each of those keys unlocks if someone copies it.
Your backups
Can you restore yesterday?
Have you ever tried it, start to finish?
Your bills
What happens when users multiply?
Which line on the invoice grows fastest, and why.
Your accounts
Whose name is on everything?
The domain, the database, the app store, the cloud account.
Your next engineer
Why was it built this way?
If nobody can answer, nobody can change it safely.
Your investors
Who owns the tech?
The question every diligence call gets to.
A full-time CTO is a big hire for a first version.
Finding one takes time and equity. “Find a CTO. Have tried doing it and failed.” (Hacker News)
Fractional means senior judgment for the hours you need, until a full-time hire makes sense.
Check it, fix it, then lead it.
1. Free audit
We test your app the way attackers do and show you what we find. Yours to keep.
2. Fix what matters
We quote the fixes from the findings, most urgent first.
3. Fractional CTO
We stay on as your technical lead for as long as it helps.
What you get each month.
Architecture calls
What to keep, what to rebuild, and why.
Code review on every release
Including what the AI wrote.
Security retests
After changes, not just once.
Hiring help
The job spec, the interviews and your first engineer's onboarding.
Tech answers for investors
Including the technical side of due diligence.
Tool and vendor choices
So you don't pay for three tools that do the same thing.
The people who check it fix it.
WebThree is the fractional CTO: the same team that tests your app does the fixes and stays on to lead the tech.
No account managers and no handoff. The people on the first call do the work, and you own the code.
When you don't need us.
You already have a technical owner
A CTO or senior engineer who owns the code already does this job.
You want someone to write all the code
That's a build project. See MVP development.
No users, payments or private data yet
Keep building. Come back before launch.
Fractional CTO FAQ
What is a fractional CTO?
A senior technical leader who works with you part time. You get the decisions, reviews and hiring help of a CTO without a full-time hire. Also called a part-time CTO or CTO as a service.
How do I hire a fractional CTO?
Start with the free audit. We test your app, show you what we find and quote the fixes. If you want us to stay on, the fractional CTO role starts from there.
How is this different from the free audit?
The audit is a one-time check. The fractional CTO role is ongoing: reviews, decisions and retests as the product changes.
Do I have to rebuild my app?
Usually not. We say what is worth keeping. Rebuilding is the last option, and we tell you why if we suggest it.
Which tools do you work with?
Apps built with Lovable, Bolt, Replit, Cursor, Claude Code and similar tools, plus the usual stacks under them, such as Supabase.
How much does it cost?
It depends on how much of your week the role needs. The free audit comes first, and the quote follows from it.
Who owns the code?
You do.
Can you help us hire a full-time CTO later?
Yes. We help you hire one, and hand over when they start.
/ The part below the water
You don't know what you don't know. We do.
WebThree is your fractional CTO. We start with a free audit of your app, fix what matters most, then stay on to lead the tech.
Testing and results are free. You keep them.