Independent software, made in the UK
Tools that get your app ready for open water.
Dynamo Maritime makes small, sharp developer tools for people who build fast and ship on their own. Our first, Seaworthy, checks AI-built apps for the security gaps that sink launches.
Our first product
Seaworthy
A pre-launch security check for apps built with Cursor, Claude Code, Lovable, Bolt and similar tools. It runs on your own machine, reads your code where it sits, and tells you in plain English what an attacker could do and how to fix it. Your code never leaves your computer.
- Finds leaked keys, open database rules and secrets shipped to the browser
- Catches unverified payment webhooks, SQL injection and prompt injection
- Gives every finding a fix, and a prompt you can paste into your AI tool
$ npx seaworthy-cli Seaworthy · notes-app · Next.js, Supabase, Stripe ✖ Not seaworthy: 2 critical CRITICAL Table public.payments has no row-level security SW-D01 supabase/migrations/0001_init.sql:20 CRITICAL Stripe webhook does not verify the signature SW-P01 app/api/webhooks/stripe/route.ts:5 Your code never left this machine.
How we work
Small company, straight answers.
Your code stays yours
Our tools run where your code lives. We don't upload it, store it or train on it.
Free is genuinely useful
The free version does the real work. Paid plans add reports, history and agency features, never a crippled free tier.
Plain English
Every finding says what is wrong, what someone could do with it and exactly how to fix it.