Health & Wellness / SaaS Marketplace

NTRL Wellness

From 17 Critical Vulnerabilities to Production-Ready in 6 Weeks

NTRL Wellness mobile app UI design mockup

The Vibe Coding Revolution

The term “vibe coding” was coined by Andrej Karpathy in February 2025 to describe a new approach to software development: describe what you want in plain language, and AI generates working code. Tools like Cursor, Replit, Bolt.new, and Lovable have made it possible for founders to build functional MVPs in hours instead of months, without writing a single line of code themselves.

By mid-2025, 25% of Y Combinator startups had codebases that were 95% AI-generated. Cursor alone scaled from zero to $100 million in annual recurring revenue in under two years. The promise is real: you can prototype faster than ever before.

But there’s a catch. Research shows that nearly 40% of AI-generated database queries are vulnerable to SQL injection, and about 25% are open to XSS attacks. One prominent case saw a SaaS founder face catastrophic collapse as attackers bypassed subscriptions, exploited API keys, and corrupted databases, all due to overlooked security gaps. Vibe coding is great for MVPs, but production-ready software requires professional engineering.

  • Client

    NTRL Wellness

  • Industry

    Health & Wellness / SaaS Marketplace

  • Original Build

    Cursor AI + Bolt.new (Vibe Coded)

  • Duration

    6 weeks

  • Investment

    $25,000

  • Tech Stack

    React, Node.js, PostgreSQL, AWS

About the project

The Client

NTRL Wellness is a marketplace connecting wellness seekers with holistic practitioners. The platform allows practitioners to list services (yoga, acupuncture, breathwork, nutrition coaching), manage bookings, process payments, and build their client base. Think of it as an Airbnb for wellness services.

The founder used Cursor AI and Bolt.new to build an initial MVP in just two weeks. The prototype looked impressive: practitioners could create profiles, clients could browse and book services, and payments processed through Stripe. Investor demos went well, and seed funding discussions began.

Then came the technical due diligence.

The Challenge: Investor-Ready Demo, Production-Unready Code

Kevin did what many smart founders do today: he vibe coded his MVP using AI-assisted development tools. Working with Cursor and Bolt.new, he built a functional prototype in just three weeks. The demo looked polished enough to present to investors — and it worked. He secured $200K in seed funding based on the vision and the proof-of-concept.

But Kevin knew the truth: what worked in a demo wouldn’t survive contact with real users. When he reached out to Beesoul, he laid out the problems:

  1. Security Vulnerabilities: User authentication was implemented with basic JWT tokens and no refresh mechanism. Passwords were hashed but with an outdated algorithm. There was no input sanitization, leaving the platform vulnerable to SQL injection and XSS attacks.
  2. Healthcare Compliance Gaps: As a wellness platform handling health-related data, NTRL needed HIPAA-adjacent security practices. The vibe-coded version stored sensitive user information in plain text and had no audit logging.
  3. Scalability Issues: The database schema was denormalized in ways that would cause performance collapse beyond a few hundred concurrent users. API calls weren’t rate-limited. There was no caching strategy.
  4. Payment Integration Problems: Stripe was “integrated” but in test mode only, with hardcoded API keys visible in the frontend code. The checkout flow had no error handling for failed transactions.
  5. No Intelligent Matching: Users had to manually search and filter practitioners. Kevin’s investors were excited about the promise of “AI-powered practitioner matching” — but that feature didn’t exist yet.
“I showed investors a vision. Now I needed to ship a reality. The AI tools got me 60% of the way there — fast. But that last 40% was going to take expertise I didn’t have.”

— Kevin Agee, Founder, NTRL Wellness

Our Approach: Surgical Transformation, Not Full Rewrite

Many agencies would have quoted Kevin a 6-month rebuild from scratch. We took a different approach. The vibe-coded MVP had valuable elements: the UI was clean, the user flows were intuitive, and the core business logic was sound. Our job was to preserve what worked while surgically replacing what didn’t.

We structured the engagement into three focused phases:

Phase 1: Security Hardening & Compliance (Weeks 1-2)
  1. Replaced authentication system with OAuth 2.0 + secure session management
  2. Implemented bcrypt password hashing with proper salt rounds
  3. Added comprehensive input validation and sanitization across all endpoints
  4. Encrypted sensitive health data at rest and in transit
  5. Built audit logging for all data access (HIPAA-adjacent compliance)
Phase 2: Infrastructure & Scalability (Weeks 2-4)
  • Normalized database schema and optimized queries (reduced average response time from 2.3s to 180ms)
  • Implemented Redis caching for practitioner listings and search results
  • Migrated Stripe integration to production with proper webhook handling and error recovery
  • Set up CI/CD pipeline with automated testing
  • Configured auto-scaling on AWS to handle traffic spikes
Phase 3: ML-Powered Matching Engine (Weeks 4-6)

This was the differentiator Kevin promised his investors — and what would set NTRL apart from generic directory listings. We built two interconnected ML systems:

Technical Deep Dive: The ML-Powered Matching System
Symptom Analysis Engine (NLP)

When users describe their wellness goals or health concerns in natural language, our NLP pipeline processes their input to extract structured intent:

  • Named Entity Recognition (NER): Identifies specific conditions, symptoms, and wellness goals (“chronic back pain,” “stress management,” “postpartum support”)
  • Intent Classification: Categorizes whether the user is seeking treatment, prevention, maintenance, or exploration
  • Severity Scoring: Assesses urgency to prioritize practitioners with relevant availability

We fine-tuned a transformer-based model on a dataset of 50,000+ wellness consultation transcripts, achieving 91% accuracy in symptom-to-specialty mapping.

Funding Journey and Growth

Kevin Agee had a vision: a marketplace connecting wellness seekers with holistic practitioners. He vibe coded an MVP using AI tools that was compelling enough to secure $200K in seed funding — but the codebase wasn’t production-ready. Security gaps, architectural issues, and scalability concerns threatened to derail his momentum. Beesoul stepped in, and in just 6 weeks with a $25K investment, we transformed his prototype into a secure, ML-powered platform ready for launch.

6

Weeks

$25K

Investment

$200K

Funding Secured

89%

Match Accuracy

Key Takeaways for Vibe Coders

  1. Your MVP isn't worthless — it's a foundation.

    AI-assisted development tools can get you 60-70% of the way to a working product. Don’t throw that away; build on it

  2. Security can't be bolted on later.

    The longer you wait, the more expensive it gets. If you’re handling any user data — especially health-related — get this right before launch.

  3. ML features need production infrastructure.

    A demo that shows “smart matching” is different from a system that can run matching algorithms at scale with sub-second latency.

  4. Speed matters.

    Kevin’s competitors weren’t standing still. Getting to market 4 months faster than a traditional rebuild meant capturing early practitioners and building network effects.

Results: Launch-Ready in Record Time

Six weeks after kickoff, NTRL Wellness launched to its first cohort of users. Here’s what we delivered:

Metric Result
Time to Production 6 weeks (vs. 6-month industry average)
Total Investment $25,000
Security Vulnerabilities Fixed 17 critical, 23 moderate
API Response Time 2.3s → 180ms (92% improvement)
ML Match Accuracy 89% user satisfaction on first recommendation
Scalability Tested to 10,000 concurrent users

Related Case Studies

Helping Autism Doctor Build a Care Platform: A Case Study

How we helped Dr. Katiraei build Wholistic Minds, raise $850K in funding, and save $3.6M in dev costs. Healthcare software development case study.

Enhancing visual appeal for an e-commerce site

This is a case study about Enhancing Visual Appeal for an e-commerce Lulu & Stone. Tis page lists what Beesoul did for online the online Store.

Talent Acquisition Portal: A Case Study on Digital Solutions

Discover how FinCrime Consultants achieved a 200% increase in hiring process with a custom talent acquisition portal. Read the full case study!

Spark Car – A car rental application

How Beesoul built Spark Car's digital platform with 10K+ downloads, transforming Nepal's oldest car rental company (est. 1996) from offline to digital-first.

Online hotel booking system

How Beesoul built Nepal's authentic hotel booking platform with .NET and Flutter, achieving 60% increase in bookings and IME Pay integration.

Cannabis DTC Platform : HeroJane cannabis brands in the California market

How Beesoul built HeroJane's compliant cannabis marketplace with custom tax calculations, order limits, and vendor management for California's regulated market.

Building ERP system for construction company

This is a case study about building ERP system for construction company that could integrate various functionalities for Fullmoon developers.

Frequently
Asked Questions

Table of Contents

Creating a roadmap to guide the development process and aligning it with your business objectives. Establishing best practices and methodologies to ensure efficient and consistent development.

  • Project plans and direction
  • Defining processes and standards
  • Market research
  • Setting goals

Creating a roadmap to guide the development process and aligning it with your business objectives. Establishing best practices and methodologies to ensure efficient and consistent development.

  • Project plans and direction
  • Defining processes and standards
  • Market research
  • Setting goals

Creating a roadmap to guide the development process and aligning it with your business objectives. Establishing best practices and methodologies to ensure efficient and consistent development.

  • Project plans and direction
  • Defining processes and standards
  • Market research
  • Setting goals