Starter Security Review

Best for MVPs, early-stage SaaS apps, small internal tools, or apps with a limited attack surface.

RECOMMENDED FOR:

• Pre-launch apps
• Small SaaS apps
• Apps with limited roles, endpoints, or workflows
• Founders who want a practical first security pass

INCLUDES:

• Manual black-box review
• Prioritized findings
• Proof-of-concepts where possible
• Step-by-step fixes
• Markdown report
• 1 free rescan within 14 days

Because you need to know...

• what’s actually broken
• why it matters
• how to fix it

That’s exactly what this is. If I don’t find anything meaningful, I’ll tell you.

HOW IT WORKS

• You send your app / URL to [email protected]
• I confirm you own it and send you an authorization agreement via email
• I perform a manual black-box security review, testing your app from the outside like a real attacker would
• You get a clear report with findings + fixes within 48hrs

Simple. No back-and-forth. No sales calls. No upsells. Just a report.

WHAT YOU GET

I manually review your app like an attacker would and provide:

In the FREE review:

=Limited availability (I only take a few free reviews per week)=

• Review across your app (not just one area)
• List of all identified vulnerabilities (high-level)
• Full details + proof-of-concept for 1 issue (others high-level only)
• At least 1 concrete fix you can apply immediately
• Report in Markdown (.md)
• High-level risk explanation

In the PAID review (one-time fee):

• Prioritized list of vulnerabilities (what to fix first)
• Full coverage of all identified issues including proof-of-concepts (not just one)
• Attack paths and chaining (how issues connect)
• Step-by-step fixes you can actually implement
• Report in Markdown (.md) so you can paste into ChatGPT / Claude and fix faster
• Straightforward explanations (no enterprise fluff)
• Includes 1 free rescan within 14 days for the issues found in the report. The rescan only covers issues found in the original report and confirms whether the fixes are working. Additional rescans or new areas of testing are 50% off.

Most apps have multiple issues. The paid review breaks down all of them in full detail.

WHY THIS PRICING EXISTS

Most companies charge $5,000+ for similar work. They sell compliance. I focus on helping builders ship safer, faster.

WHAT I CHECK

• Auth and session handling
• API security and misconfigurations
• Firebase / backend exposure
• Secrets leakage
• Access control issues
• Common OWASP Top 10 risks

WHAT THIS IS NOT

• Not a compliance audit
• Not a checkbox pentest
• Not a certification

This is a practical, developer-focused security review.

WHO THIS IS FOR

• Indie hackers
• SaaS founders
• Builders shipping fast
• Anyone who wants real security feedback without paying $5k+

TURNAROUND

Usually 24-48 hours depending on scope.