Pick the stack
Concrete products for every layer. Swap any with one click.
Design your stack. Pick your tier.
Start from an empty folder or a half-built app. Re:Seal builds it on a branch.
Stack picks (click any chip to swap)
HostingFree tier
Edge routing and low-latency API proxy.
DatabaseFree tier
Row-level security on user and licence tables.
AuthFree tier
Server-verified JWTs and email confirmation.
PaymentsPer sale
Webhook-driven entitlements, never client trust.
SecretsFree tier
Encrypted runtime injection outside git.
Abuse limitsFree tier
Per-account quotas so bots cannot burn AI credits.
MonitoringFree tier
Alert on auth spikes, 5xx errors, and failed webhooks.
Client protection$0+
Protect shipped client code where server isolation ends.
Signing & builds$99/yr
Signed binaries and traceable release artifacts.
Generated plan
Server-side authority, per-user quotas, and signed sessions.
- ServerEnforce HttpOnly sessions, webhook verification, and per-account rate limits.
- LocalKeep sensitive logic and system prompts strictly server-side.
Selected stack wired into tasks
Cloudflare Workers · Supabase · Supabase Auth · Stripe Checkout · Cloudflare Secrets · Upstash Redis
Still vulnerable to
Coordinated abuse campaigns or reverse engineering of local clients.
You choose. It builds.
Map the boundaries
A graph of every component and the flows between them.
Build task by task
On its own branch. Main stays untouched until you merge.
Five tiers, and who can still break each.
| Tier | Agent time | Adds | Still breaks it |
|---|---|---|---|
| Basic | 0.05–0.2 days | Closes obvious key and paywall leaks | Determined users |
| Normal (recommended) | 0.2–1 day | Real server-side auth, payments, quotas | Coordinated abuse, client reversing |
| Advanced | 1–3 days | Defense in depth, monitoring, alerts | Skilled reverse engineers |
| Ultra | 3–8 days | Hardened binaries, anti-tamper, device tokens | Full-time cracking groups |
| Hypermax | 8–20 days | Hardware keys, VM obfuscation, per-buyer builds | Elite crews, nation-states |
Five trust zones.
| Zone | Covers |
|---|---|
| Client | Bundles, apps, local storage |
| Server | APIs, webhooks, entitlements, rate limits |
| Storage | Databases, row-level security, secrets |
| OS & binary | Signing, keychains, anti-debug, obfuscation |
| Third-party | Auth, billing, hosting, AI APIs |
On its own branch. Undo in two clicks.
- One commit per task on
reseal/<tier> - Diff viewer with per-file revert
- Chat to add, edit or skip tasks mid-run
- Pentest and DSA rescan when it's done