Phoenix - Your AI AssistantSecurity audit and debug your web or mobile app
Delivery in
4 days
- Views 5
Amount of days required to complete work for this Offer as set by the freelancer.
Rating of the Offer as calculated from other buyers' reviews.
Average time for the freelancer to first reply on the workstream after purchase or contact on this Offer.
What you get with this Offer
Is your app leaking data, breaking in production, or did you build it fast with AI tools (Lovable, Replit, Bolt, Cursor) and now you're not sure it's safe? I'll go through it properly and tell you exactly what's wrong and how to fix it.
WHAT I CHECK
- Login and access control: can one user see or change another user's data?
- Database rules: Supabase RLS policies, Firebase security rules, open tables
- API endpoints: missing auth checks, exposed data, input validation
- Secrets: API keys or passwords exposed in the frontend or the repo
- Payments: Stripe webhooks verified, prices not editable from the browser
- Common vulnerabilities: injection, XSS, insecure uploads, outdated packages
- Bugs: I diagnose up to 3 bugs you're seeing and find the root cause
WHAT YOU GET
- A clear written report, every issue ranked Critical, High, Medium or Low
- Plain-English explanation of each issue and what it means for your business
- Step-by-step fix instructions your developer can follow
- Root cause and fix plan for up to 3 bugs
- 7 days of follow-up questions after delivery
WORKS WITH
Next.js, React, Node.js, React Native, Expo, Flutter, Supabase, Firebase, PostgreSQL, Stripe, and apps built with AI coding tools
This is a code and configuration review for 1 app (1 web app, or 1 mobile app with its backend). It's not a formal penetration test or compliance certification.
WHAT I CHECK
- Login and access control: can one user see or change another user's data?
- Database rules: Supabase RLS policies, Firebase security rules, open tables
- API endpoints: missing auth checks, exposed data, input validation
- Secrets: API keys or passwords exposed in the frontend or the repo
- Payments: Stripe webhooks verified, prices not editable from the browser
- Common vulnerabilities: injection, XSS, insecure uploads, outdated packages
- Bugs: I diagnose up to 3 bugs you're seeing and find the root cause
WHAT YOU GET
- A clear written report, every issue ranked Critical, High, Medium or Low
- Plain-English explanation of each issue and what it means for your business
- Step-by-step fix instructions your developer can follow
- Root cause and fix plan for up to 3 bugs
- 7 days of follow-up questions after delivery
WORKS WITH
Next.js, React, Node.js, React Native, Expo, Flutter, Supabase, Firebase, PostgreSQL, Stripe, and apps built with AI coding tools
This is a code and configuration review for 1 app (1 web app, or 1 mobile app with its backend). It's not a formal penetration test or compliance certification.
What the Freelancer needs to start the work
- Read-only access to your code (GitHub, GitLab or a zip file)
- A staging or live link and a test account (2 accounts if your app has user roles)
- Your tech stack, if you know it
- For bugs: what happens, what should happen and steps to reproduce
- Any areas you're especially worried about (payments, user data, admin panel)
I never need write access to your production database.