How do you vet custom software development agencies? Developers, what red flags should I look for?