Security snapshot
A fast, passive review of the live app you already expose to the internet.
£49One-off review. No repository access and no subscription.
What gets checked
- Security headers Public response
- Exposed routes and files Public access
- Client-side secrets Browser bundle
- Visible authentication risks Login flow
- Common deployment mistakes Live configuration
What you receive
A concise PDF that separates urgent faults from lower-priority improvements.
- Evidence for each finding
- Risk and likely impact
- Prioritised developer actions
- Clear limits of the public-only review
Public admin route exposedHigh priority · evidence included
Security header presentPassed check




Right-sized scope
Good fit
- You need a quick external check
- The app is early or pre-launch
- You are not ready to share code
Choose a code review if
- The app stores customer data
- You need Supabase or Firebase policies checked
- You want authentication logic reviewed
Start with what is public
After payment, send the app URL. We confirm ownership and scope before the review begins.