01Live
APIs
Built for developers, however you write code. Plug-and-play building blocks that do one thing fast, with docs you can read in five minutes.
FOR → developers shipping today
NOT FOR → enterprise procurement
APIs for builders.[01]
Tools for humans.[02]
App de Bock is an independent software studio. Fast APIs, focused apps, and the occasional production audit.
[01] APIs
For developers, however you write code.
[02] Apps
Small software, built properly.
[03] Production Audit Soon
Find what your AI missed. 2 per month.
Build receipt
No. 0001 · appdebock.nl · 22/09/2026
- Humans
- 1
- Ad trackers
- 0
- Cookies
- 0
- Third-party requests
- 0
- p95 latency
- 350 ms
- Page weight
- 247.8 KB
- CO₂e / view
- 0.031 g
- Uptime, 90d
- 99.99 %
- TOTAL BLOAT
- 0.00
STATUS: SHIPPING
§ The teamHeadcount: 1
App de Bock is just me. An aeronautical engineer who ended up building software.
Hey, I'm Matthijs. I studied aeronautical engineering, spent a few years managing product portfolios at an aircraft maintenance company, co-founded a logistics SaaS as CTO, and now build software on my own from Haarlem. Eight years of data-driven products, mostly the unglamorous kind that has to keep working.
§ What I build
Three kinds of work.
See the APIs
02Shipping
Apps
Standalone software built end to end and run in production. Back-office systems, data tools, and whatever's currently in the lab.
FOR → people with a job to do
NOT FOR → engagement metrics
Coming soon · expected early 2027
032 per month
Production Audits
A 3-day security review for apps built with AI. I read your repo like someone trying to get in, then hand you a plain-language list of what's broken. Worst first.
FOR → AI-built apps with real users
NOT FOR → SOC 2 / ISO compliance
[01] APIs
APIs that won’t break your weekend.
Fast, focused endpoints. One key, one call, one job done well.
- Auth
- One API key
- SDK required
- No
$ curl https://api.[name].nl/v1/[endpoint] \ -H "Authorization: Bearer $API_KEY" 200 OK 200 ms · eu-west { "timestamp": "2026-03-24T12:00:00.000Z", "success": true, "message": "OK", "type": "SimpleResult", "data": { ... } }
- P95 LATENCY
- 250 ms
- UPTIME, 90D
- 99.99%
- WEEKENDS BROKEN
- 0
- llms.txt + OpenAPI 3.1Whole schema, one fetch.
- Self-correcting errorsYour LLM fixes its own typos.Soon
- MCP serverNative in Cursor & Claude.Soon
- One-header authNo OAuth dance. Ever.
[02] APPS
Small software, built
properly
Operational tools, built solo and run in production. Some are client work, some are mine, most aren't public.
MatchCustomerNames
Messy customer names in a 50,000-row export, deduplicated without a human reading them.
CargoClub
A loyalty programme for logistics, built to reward the operators who move freight more sustainably.
Coming soon · expected early 2027
You vibe-coded the MVP. Let's make sure strangers can't read your database.
Cursor and v0 got you to 90%. The last 10% is what they're worst at: ~45% of AI-generated code ships with OWASP Top 10 flaws.
So I read your repo like someone trying to get in: who can see your data, who can call your endpoints, what your app hands to every browser. You get a plain-language list of what's broken, and what to fix first.
- STACK
- Next.js // Supabase // Vercel // Node
- TIME
- 3 day sprint · fixed scope · report + 30-min walkthrough
- RATE
- €1,500 fixed. No surprise invoices.
- TERMS
- EU-based · NDA on request · code not retained
View audit specs & book triage
15-min triage call · if it's not worth it, I'll say so
DIAGNOSTIC RECEIPT
SAMPLE · Audit #[000] · 3 days
Next.js/Supabase/Vercel/Node
- Supabase RLS
- 3 tables open
- Ownership checks
- 7 endpoints
- Server Actions
- 2 unauthenticated
- Secrets in bundle
- 1 live key
- Dependencies
- 4 known CVEs
- Preview deploys
- prod DB attached
- Stripe webhook
- unverified
- CRITICAL
- 4
- FIX BEFORE LAUNCH
- 4
- FIX THIS MONTH
- 9
Every line: what it is, why it matters, how to fix it. Sleep well on launch night.
Launch offer2 SLOTS / MONTH
€750€1,500
First five clients get the full audit at half price. The catch: you write me a testimonial afterwards.
§ House rules
The software I build is fast and carbon-efficient, made for humans.
RULE01/04
Fast, or it doesn’t ship.
Every endpoint gets a latency budget before it gets a name.
- BUDGET
- 350 ms
- CHECK
- PASSING
RULE02/04
Light on the planet.
Small pages, few requests, no JavaScript that isn’t earning its keep.
- CO₂E / VIEW
- 0.031 g
- CHECK
- PASSING
RULE03/04
You’re not the product.
No ad-tracking. No dark patterns. No bloated subscriptions.
- TRACKERS
- 0
- CHECK
- PASSING
RULE04/04
Docs a human can read.
If it needs a 50-page manual, the API is wrong, not you.
- READ TIME
- 5 min
- CHECK
- PASSING