Folean
Start free

Building is solved. Knowing is not. Here is what happens to the people who only got the building part.

96%

of AI-built apps put under a deep check carried at least one security problem.

Source: 2025 deep review of AI-generated applications

62%

carried one rated critical or high. Not a warning. Something a stranger could use.

Source: Same review, severity breakdown

7%

had a database any stranger on the internet could read.

In the Y Combinator control group, none did.

Source: Same review, against a Y Combinator cohort

200k

new projects a day are created and arrive at exactly the same wall.

Source: Reported daily project volume across AI app builders, 2025

Figures come from published 2025 studies of AI-generated applications. We repeat them here with the method attached, because a number without a method is a claim, and we do not sell claims.

Scene one

Starting from nothing.

Nothing exists yet, and that is a real position rather than a shortcoming. Everything is still free to change, and it will never be this cheap again.

  1. 01You write one sentence.
  2. 02Folean asks the questions that are cheap now and brutal later.
  3. 03Your answers become documents a company can actually stand on.
  4. 04The road appears, and you are already on it.

Your idea

a booking app for my salon

What Folean needs to know

If a stylist opens the app, may they cancel a booking that is not theirs?

Technical name: authorization model

Should one customer ever be able to see another customer's phone number?

Technical name: row-level security

Someone pays a deposit of 19.99. Where exactly does that number live?

Technical name: money stored as integer minor units

Founding documents, written for you

What this is

One paragraph, plus the list of things it is deliberately not.

Who may see what

Every kind of person, and what each may read, write, and never touch.

How money and time are stored

Settled once, in writing, before anything is built on top of it.

Decisions and why

Each choice, the alternative you turned down, and the reason. Dated.

Your road, ten milestones

Your idea, written down

Stage T0

The decisions that cost the most to change

Stage T0

How it looks and how it feels

Stage T1

The first version that actually runs

Stage T1

Six more after these. You bring the idea, Folean brings the rest.

Scene two

Continuing what exists.

Attaching a project to a chatbot gets you a reader. Connecting one here gets you a position, and everything a position implies.

  1. 01Folean reads every part of what you already built.
  2. 02It works out where you actually stand, and says it in one sentence.
  3. 03Then it shows you the gates you walked straight past.

What this project is

salon-appthe whole thing
webwhat your customers see
apithe part that answers
adminthe screens only you open
databasewhere the bookings live

One project with four parts inside it.

Where you stand

You are here

Real people are already using Salon App.

Someone other than you has put their data inside. From here on, wiping the database or removing a column directly are no longer available, to you or to us. They are refused rather than warned about.

Stage T3

Two gates behind you were never closed. Nobody told you they existed.

Anyone who knows your app's address can read every order, including your customers' names and phone numbers.

Technical name: row-level security

Your last change has no way back. If it broke something for a customer, the only direction available is forward.

Technical name: no rollback path

9:41

Verdant

Deliver to Jalan Melati 12

3
Search this morning's harvest
FruitGreensBakeryDairy
A market stall stacked with fruit and vegetables

Picked this morning,
at your door by noon

Near you today

See all
Garden salad box

Garden salad box

$6.40per box
Baby watermelon

Baby watermelon

$4.20each
Leaf mandarins

Leaf mandarins

$3.10per kg
Seeded sourdough

Seeded sourdough

$5.00per loaf
Basket · $13.70
HomeSearchBasketOrders
Scene three

An app taking shape.

Not a wireframe you have to imagine your way into. A product with a name, prices, photographs of the thing you are actually selling, and a person somewhere who wants it.

  1. 01It starts as empty shapes, the way any screen does.
  2. 02Words arrive before pictures, because the words are the product.
  3. 03Then real photographs, real names, real prices.
  4. 04And then it is an app rather than a mockup.

Straight answer: autonomous building is the part we are still building. Today Folean reads your project and proves what is true about it. We would rather show you the destination than pretend we are already there.

Scene four

The company paperwork.

The hard part was never the code. It was the twenty documents that turn a working app into something a customer will trust, a bank will accept, and a buyer will pay for. Folean writes them from what your product actually is.

01 / 04Salon App

What this product is

Technical name: product brief

In one line

A booking app for one salon, its four stylists, and the people who come back every six weeks.

Deliberately not

Not a marketplace. Not a payment processor. Not more than one branch, and not this year.

Who it serves

The owner, the stylists, and the customer booking at eleven at night from a sofa.

02 / 04Salon App

Who may see whose data

Technical name: access control matrix

Owner

May see everything in the salon.

Never nothing is hidden.

Stylist

May see their own day and their own bookings.

Never another stylist's earnings.

Customer

May see their own bookings and receipts.

Never every other customer, ever.

03 / 04Salon App

What you promise your customers

Technical name: privacy notice

What is collected

Name, phone number, the times you booked, and what you paid. Nothing else is stored.

How long it is kept

Bookings for seven years because the tax office says so. Phone numbers until you ask us to stop.

Who else sees it

The card processor sees the payment. Nobody else, and nothing is sold.

How to be forgotten

One request, answered inside thirty days, and it actually happens.

04 / 04Salon App

Every decision, and why

Technical name: decision record

0007 · 14 March

Money is stored in whole cents.

The alternative was a decimal number. Rejected because 19.99 eventually stops being 19.99, and refunds are where people notice.

0011 · 2 April

A customer can never see another customer's bookings.

Enforced in the database itself, not in the app, because the app is not the only thing that will ever talk to it.

  1. 01The paperwork every company needs and nobody enjoys writing.
  2. 02Written from what your app actually does, never from a template.
  3. 03Kept in step with the thing itself, so it does not quietly go stale.
  4. 04Ready when a customer, a bank or a buyer finally asks.
The stage decides

The same action, safe today and unforgivable tomorrow.

Nothing about the action changes. Everything about the consequence does. This is the one thing a tool that only writes code can never tell you, and it is the reason people lose their weekend.

Reset the database and start clean

Technical name: drop and recreate

While it is just you

Free

There is nothing to lose.

Once it is online

Free

Still only your own data.

Once real people use it

Refused

Someone else's life is in there.

Once people depend on it

Refused

Their day breaks with it.

Remove a column nobody uses

Technical name: destructive migration

While it is just you

Free

Change your mind freely.

Once it is online

Free

Nothing depends on it yet.

Once real people use it

Refused

That column is somebody's record.

Once people depend on it

Refused

Gone means gone, and audited.

Change how the app answers

Technical name: breaking change to a public interface

While it is just you

Free

Nobody is listening.

Once it is online

Free

Only you are listening.

Once real people use it

Careful

Open screens break mid-sentence.

Once people depend on it

Refused

Other systems break with you.

Ship with no way back

Technical name: deploy without a rollback path

While it is just you

Free

Just build it again.

Once it is online

Careful

You can still redeploy over it.

Once real people use it

Refused

Broken, with real people inside.

Once people depend on it

Refused

An outage with no exit.

Refused means refused. Not a warning you can click past, and not available to us either. The point of knowing where you stand is that the answer starts binding somebody.

What actually goes wrong

None of these are exotic.

Every one of them is ordinary, common, and quietly present in working software right now. The problem was never that they are hard to fix. It is that nobody tells you they are there.

01Your database is readable by anyone who finds the address.02Your secret keys are sitting in code you pushed in public.03Anyone who signs up can make themselves an administrator.04Deleting a customer deletes their invoices, and the tax office wants those.05Prices are stored as decimals, so 19.99 sometimes becomes 19.98.06There is no way back from the change you shipped last night.07Nobody has ever checked that a backup can actually be restored.08Two people book the same slot and both get a confirmation.09The password reset link works forever, for anyone who has it.10The app believes whatever the browser tells it about who is logged in.11Uploaded files are served straight back, so strangers can host anything on your domain.
12The payment goes through and the order is never written down.13Time zones are ignored, so a Sunday booking lands on Saturday.14Nothing separates one customer's records from another's, so one slip shows them each other's.15Nothing limits requests, so one script can drain your budget overnight.16Your logs are quietly recording full card numbers.17Error messages tell strangers the shape of your database.18A part you depend on was abandoned three years ago and has a known hole.19Email is compared letter by letter, so people lock themselves out with a capital.20Nobody can tell you who changed what, or when, or why.21The copy you practise on is wired to the real customers' data.22Someone asked to be deleted, and searching the site still finds them.
On the record

We do not tell you it is safe. We show you what we ran.

That standard has to survive contact with our own roadmap first. Here is what Folean does today and what it does not do yet, with no softening in between.

Working today

Live for everyone
  • Read any project, whatever shape it is in.

    One place or six. Five hours old or five years old.

  • Say where you stand, in one sentence.

    A position on the ten milestones between an idea and a company.

  • Prove what is true, with evidence you can check.

    Every finding carries what was run and the output it produced, unedited.

  • Show the gates you walked past.

    Including the ones nobody ever told you existed.

  • Write the founding documents from your answers.

    What it is, who may see what, how money is stored, and why.

  • Say what could not be checked, and why.

    Never silently dropped, because a missing check is not a pass.

Being built

Not shipped yet
  • Build the next change and ship it.

    From a decision you approved to a change that is live, without you writing it.

  • Keep watching after you stop looking.

    Continuous maintenance rather than a report you read once.

  • Refuse an action the stage forbids.

    Not a warning you can click past. Refused, to you and to us.

  • Do all of it across a project in many parts.

    One place is easy. Six places talking to each other is the real world.

A dashed circle here means exactly what it means everywhere else in Folean: not checked, not proven, not claimed.

Pricing

Knowing is free. Always.

Finding out where you stand should never sit behind a card form. You pay us when we start doing the work, not when we start telling you about it.

Free

Open now
$0forever

Read any project, and prove what is true about it.

  • Your position on the ten milestones
  • Every finding in plain language, with the technical name kept
  • The evidence behind each one, unedited
  • What could not be checked, and why
  • Founding documents written from your answers
Start free

Build

In build
$39per month

Folean does the building, you keep the decisions.

  • Everything in Free
  • A change proposed, built, and waiting for your approval
  • Every change ships with a way back
  • Actions your stage forbids are refused, not warned about
  • Works across a project spread over several parts

Opens when the building ships. Free users go first.

Operate

In build
$149per month

It keeps watching after you stop looking.

  • Everything in Build
  • Continuous checks rather than a report you read once
  • Paperwork kept in step with the product as it moves
  • A trail an outsider can follow without your help
  • Ready for the day somebody asks for proof

Opens when the building ships. Free users go first.

Only Free is open today, and it stays free. We are not going to take money for something we have not shipped, which is the same reason the list above this one is split in two.

Every company you admire started as something unfinished.

Founder is not a title somebody hands you. It is a thing you start. You bring the idea, or the half-built thing you stopped touching. Folean brings the rest.

Start from an ideaResume a project

Free, no card, read-only. Everything we call proven has a receipt.