Skip to content

    Vibe coding

    What it costs to finish a vibe-coded app in 2026 (real ranges, and the arithmetic behind them)

    Author

    AI Cubed

    Published

    September 9, 2026

    Read time

    9 min

    Ask three developers what it costs to finish your AI-built app and you'll get three numbers that differ by a factor of five. That's not because two of them are lying. It's because "finish" is undefined until someone has looked at the code, and because rates vary enormously. This guide gives you the arithmetic so you can sanity-check any quote you receive — including ours.

    We don't publish a single price here because we quote fixed scope after a two-business-day audit, and a number without the audit would be a guess. What we can publish is how the number is built, which is more useful than a price tag anyway.

    The effort side: what actually has to be done

    Our itemised guide to the last 20% lists fourteen items. Here they are again with effort in engineer-days, for a typical single-tenant web app with a database and a few third-party APIs, done by someone who has done them before.

    Effort per item, in engineer-days
    ItemLowHighNotes
    Secrets out of repo/browser, rotated12Includes purging git history if needed
    Paid APIs moved server-side13More if many integrations
    Database access rules (RLS)24Per-table policies, tested with two users
    Auth on real domain, phones, refresh, reset13Mostly configuration; testing takes the time
    Separate environments12
    Payments in live mode, webhooks, refund13Only if you charge
    Schema as migrations, reconciled13Worse if the dashboard has drifted far
    Error handling and failure states25Scales with number of screens
    Tests on the money paths25Sign-up, checkout, core action
    Deploy from repo, with rollback12
    Monitoring and alerts0.51
    Backups, tested0.51
    Performance on real data14Indexes, pagination, query fixes
    Legal pages and account ownership0.51
    Total≈ 16≈ 39Typical rescue lands at 10–20 days once items that don't apply are removed

    A real app rarely needs every item at the high end, and several may not apply. In practice most rescues we scope land between ten and twenty engineer-days. Add the features that never quite worked on top of that.

    The rate side: what you'll actually be quoted

    Indicative hourly rates by who's doing the work (2026, USD)
    WhoTypical hourly rangeWhat you getWatch for
    Offshore freelancer$25–75Capable execution on a clear specYou are the spec and the QA; security items are frequently skipped
    US/EU freelancer$75–150Experienced generalistAvailability; single point of failure; ownership of accounts
    Small agency / studio$120–250A team, process, accountabilityWho actually does the work; hand-offs after the sales call
    Large agency$200–400+Scale and processMinimum engagement sizes; junior staffing
    Vibe-coding-rescue specialistsUsually fixed scopeThe specific checklist, done beforeWhether the audit is real or a sales call

    These are market observations, not quotes, and they move. The point is the multiplication: fifteen engineer-days is 120 hours. At $60/hour that's about $7,000; at $150/hour about $18,000; at $250/hour about $30,000. Same work, very different numbers — and very different odds that the security items actually get done.

    The four things that move the number most

    1. Has the core flow ever worked end to end for a real user? If yes, the work is additive and predictable. If no, there's discovery inside the estimate, and the range widens.
    2. How much security has to be corrected? Missing RLS on three tables is a day. A client-side architecture that leaks by design is a rewrite of the data layer.
    3. Are payments involved? Live-mode verification, webhooks, refunds and reconciliation add days and require real transactions.
    4. Who owns the accounts? If hosting, database and domain are in someone else's name, migration adds time — and it's non-negotiable.

    Fix versus rebuild: the cost logic

    A rebuild replaces the fourteen-item list with "build it properly from scratch," which for a typical MVP is four to eight weeks. That's more than a rescue — unless the rescue involves understanding a codebase nobody can read, in which case the understanding costs more than the writing. The five-signal test in our fix-or-rebuild framework tells you which side you're on. Rebuilds are also consistently underestimated, because the original requirements are scattered across the old code; insist on a phased plan with a working first version early.

    How to get a quote you can trust

    • Pay for an audit first. A fixed-price, two-day audit that produces a written report and a fixed quote is worth more than any free estimate, because the estimate is guessing.
    • Ask for the checklist. If they can't show you the list of items the quote covers, the quote covers whatever is convenient later.
    • Ask who does the work and whether they were on the call.
    • Ask whose name the accounts will be in. The only acceptable answer is yours.
    • Prefer fixed scope. An hourly meter with no checklist is how a two-week rescue becomes a four-month relationship.

    What AI Cubed does about this

    We quote fixed scope after a two-business-day, fixed-price audit that produces the itemised list above with your numbers in it. If a rebuild is cheaper we say so on day two. See vibe-coding rescue.

    Frequently asked questions

    Start here

    See where your operation is losing time.

    Twenty minutes with an operator, not a salesperson. We'll name the one bottleneck costing you the most — and tell you whether it's worth fixing with software at all.

    Book your free 20-minute consult

    20 minutes · video call · no preparation needed