Zapyt
Zapyt
AI-powered accumulator recommendations built for real soccer bettors. Shipped as a full subscription SaaS with 12 security vulnerabilities resolved before a single user signed up.
The challenge
Accumulator betting is saturated with low-quality tips and gut-feel predictions. The founder of Zapyt saw a genuine gap: AI-generated recommendations grounded in real match data, probability weighting, and historical accuracy — not opinion. The idea was strong. The execution challenge was substantial. A product like this had to ingest live match data reliably, generate recommendations users could actually trust, and operate as a full subscription SaaS from day one. There was no room for a soft launch with rough edges. With the World Cup 2026 as a marketing anchor, the timeline was fixed. We had to build the whole thing — correctly. When users are making financial decisions based on your platform's recommendations, security isn't a checkbox — it's a foundation. A vulnerability that leaks prediction logic or user data doesn't just create legal exposure. It destroys the product's core value proposition: trustworthy data.
Our approach
We ran a full OWASP-aligned security audit before launch. We found 12 vulnerabilities. We fixed all of them. The platform launched clean.
Tech stack
What we built
- Live match data pipeline — Reliable ingestion of live match data from multiple sources. Deduplication, normalisation, and storage designed for fast read access from the AI layer during high-traffic periods.
- AI recommendation engine — Python-based prediction layer with probability-weighted accumulator recommendations. Historical accuracy tracking feeds back into the model. Users see performance data alongside each recommendation.
- Subscriber SaaS application — Daily recommendations, accuracy history, and subscription management in a clean React frontend. Stripe integration for recurring billing. Free tier to acquisition path designed for low-friction conversion.
- OWASP security audit — Full pre-launch audit covering injection, authentication, access control, data exposure, and configuration. 12 vulnerabilities identified and resolved. Platform launched with a clean bill of health.
Results
Let's talk about yours
Fifteen minutes, no pitch. Tell us what you're building and you'll leave with a straight answer on scope, timeline, and cost. If we're not the right team for it, we'll tell you that too.
You'll be talking to the team
No account managers, no sales relay