Nick Thorp

I build tools that check work software was supposed to have done.

DevMeth is the second one. The first was Proven Duty — file-review tooling for UK financial advisers, built after watching good advisers produce work the regulator couldn't see. DevMeth came from the same instinct on a different stack: AI tools now write a huge share of new software, and they fail in ways that are predictable, few, and checkable — Supabase RLS left off, API keys in client bundles, auth gaps nobody tested. DevMeth scans your repo and live URL for the 48 known AI-code failure patterns, gives plain-English findings with paste-ready fix prompts, and re-scans until green.

The honest framing, everywhere including here: DevMeth is a pre-flight check, not a pentest. It checks the known patterns — then you ship.

I write the blog, read every finding dispute, and answer support.