Article
When AI Builds Need a Professional
The demo looks finished. The enquiry, checkout, CMS edit, or login is where it falls apart. Here is how Melbourne businesses decide to stop prompting and hire for the pipes.
Codex, Claude, Cursor, Lovable, Bolt and tools like them are good at a first pass. A homepage, a booking screen, a storefront preview, even a login. What they are weaker at is the unglamorous work that makes a real business safe to run: forms that land in the CRM, checkout that matches inventory, pages a human can edit, auth that scopes data correctly, and SEO that search engines can actually read.
That gap is not a moral failing. It is a production gap. This page maps the moment different kinds of businesses notice it, and which Alphesda pathway fits.
The five hire triggers
People do not usually call a studio because the colours are wrong. They call when one of these breaks:
- Integrity: leads, bookings, orders or analytics no longer match reality.
- Security: strangers can see other people's data, or secrets sit in the browser.
- Compliance: consent, privacy notices or accessibility were theatre in the demo.
- Craft: the site looks like every other AI template, or the client cannot edit copy without another prompt.
- Engineering: the React preview will not become a Shopify theme, WordPress site, or maintainable app.
We sell the gate after the demo: audit, stop the bleed, then finish and connect. We do not sell more prompting as the end state.
Industry moments (who hits which wall)
Trades and home services
Someone shipped a suburb landing page or book-online form with an AI builder. The form emails nothing, double-books, or dies on a phone. The owner is still the diary. Trigger is integrity first, then craft. Start with a website finish or tradie website pathway. Use the $200 vibe coding audit only if there is a real app or booking platform with source access.
Clinics and wellness (marketing sites)
Brochure and booking look polished. Pixels fire before consent. Intake stores personal information in a database nobody designed. Trigger is compliance and security. We finish the marketing site and booking path. We do not invent clinical advice or clinical systems. If personal information flows change, a Privacy Impact Assessment is often the honest next conversation.
Professional services (law, accounting, migration)
Practice-area pages and a client portal came out of Cursor or ChatGPT. Schema ratings look fabricated. Matter files are one URL tweak from the wrong client. Trigger is integrity plus security. Website and SEO hygiene for the brochure; audit for any portal.
Shopify beauty and fashion brands
A Lovable or Bolt storefront looked ready to sell. Disconnecting the builder, or asking Shopify to host the React export, hits Liquid and app gravity. Tax, inventory, Klaviyo and checkout still live in Shopify. Trigger is engineering and integrity. See Lovable or Bolt to Shopify and ecommerce website design in Melbourne.
Property and real estate adjacent
An AI rebuild replaced a ranking agency site. Suburb pages soft-404. Enquiries drop. Trigger is SEO equity and integrity. Plan the cutover with redesign without losing SEO rankings, not another prompt weekend.
SaaS and vibe-coded MVPs
Auth works on the laptop. Stripe charges once in a demo. Integrations return true. Checkout can succeed while access never updates. First stranger signup or first charge is the scare. Trigger is security and engineering. Start with the vibe coding audit ($200 + GST for one eligible app), then harden or rebuild what the report ranks. Detail sits on MVP production hardening.
Also common (supporting)
WordPress owners pasting AI into live themes; agencies handing a React mockup to a client who expected editable Shopify or WP; restaurants whose booking embed silently fails inside a React shell. Lovable React is not Gutenberg. Same hire triggers: brownfield CMS care, craft handoff, booking integrity. Service-business enquiry work is on AI-built service websites.
What looks finished usually still misses
Public reports and rescue write-ups keep repeating the same pattern: screenshot-complete UI with stub pipes. Industry studies of generated code also show weak security defaults often enough that a paid review before go-live is rational. We still judge your app from the repo, not from averages.
| Surface | Demo feeling | Production need |
|---|---|---|
| Form / CRM | Submitted toast | Lead in the right CRM fields, spam handled, logged |
| Booking / checkout | Happy path once | Timezones, refunds, webhooks, no double book or double charge |
| CMS | Founder re-prompts copy | Staff edit in WordPress or Shopify without AI credits |
| Auth | Login on your account | Sessions, resets, and row-level scope for strangers |
| SEO | Meta tags in the head | Crawlable HTML (not an empty SPA shell), honest schema, redirect map |
| Hosting | Preview URL | Your domain, staging, backups, someone who owns the project |
Which Alphesda pathway
- Unsure if an app is safe to launch. Standard Vibe Coding Audit ($200 + GST), seven surfaces, ranked report, rescue quoted separately.
- Need a defined completion stage. Finish an AI-built website or app handover guide, then Discovery.
- Marketing site, forms, local SEO. Website development Melbourne.
- Shopify storefront gravity. Lovable or Bolt to Shopify.
- Service-business enquiry path. AI-built service websites.
- MVP hardening after Cursor, Claude or Codex. MVP production hardening.
- CRM truth. CRM design and development.
- Automation. AI automation engineering only after the source systems are honest. We do not ship unsupervised agents on half-finished auth.
Published proof of our own ecommerce and booking work lives on the site: The Makeup Co, Luxora Hair, and Clean Fridays. Those pages show scope we have shipped. They are not promised results for your build.
When your AI build needs a professional FAQs
Is this only for apps, or for marketing websites too?
Both. Apps usually need the $200 audit. Marketing sites usually need website finish, SEO and editable CMS. Many businesses need a bit of both.
Will you rebuild everything from scratch?
Not by default. We keep what is safe, replace what is stubbed or dangerous, and say when the codebase is only a spec. That call is evidence-led.
Do you work outside Melbourne?
Yes. Melbourne-based, Australia-wide and international, remote by default.
Can I keep using AI after you harden the product?
Yes, with branches, review, and acceptance checks on the journeys that make money. Agree merge rules before both sides keep generating.
Ready to decide the next step?
Book a Discovery Session. Bring the preview URL, what fails, and whether real customers or payments are already involved. Or go straight to the vibe coding audit if you already have repo access. Call 0481 347 115 or 03 7073 2727, or email connect@alphesda.com.