I will do a security audit and code review of your web app


About this gig
Your platform works, but every change feels risky. Nobody is quite sure what will break. That is not a code problem, it is a lack of a map.
I audit codebases already in production and tell you, in plain language: where the real risk is, what it costs to fix, and in what order.
WHAT YOU GET
A written report, not a list of complaints:
- Architecture and structure: what holds up and what does not
- Technical debt that actually hurts, separated from the noise
- Security: dependencies, known vulnerabilities, exposure
- Performance: where the real bottlenecks are
- Prioritised actions, with estimated effort for each
STACKS I WORK WITH
PHP, Symfony, Laravel, Node.js, TypeScript, React and Next.js. If yours is not listed, message me anyway: the questions an audit answers are the same in any language.
WHO I AM
15 years building digital products, 8 leading engineering teams. CTO, Tech Lead at Europcar, Engineering Manager of a SaaS platform serving 10,000+ users in 9 countries.
I work with AI integrated into development, which is why an audit takes a week, not a month.
Not sure which package? Message me and I will tell you which one fits, or that none does.
Get to know Victor Sans
Software Architect Fractional CTO 15 years
- FromSpain
- Member sinceJun 2025
- Avg. response time1 hour
Languages
English, Spanish, Catalan
My Portfolio
Other Software Development Services I Offer
FAQ
Do you need access to our production systems?
No. Read access to the repository is enough. I never need production credentials, and I sign an NDA if you need one.
What if our codebase is very large?
Send me the number of files or lines and I will tell you which package fits before you order. If none does, I will say so.
Do you fix the problems you find?
The audit itself is diagnosis, not treatment. If you want the fixes done, we agree that as separate work once you know what needs doing.
Is our code confidential?
Yes, and it stays that way. I sign an NDA before receiving any access.
What if my stack is not one you listed?
Message me first. The questions an audit answers are the same in any language, but I will tell you honestly if it is not my ground rather than take the order.

