I will ai built app security and flow review


About this gig
Built your app or website with AI (Cursor, Lovable, Bolt, Replit, v0, ChatGPT or Claude)? It may look like it works, but AI-generated code often hides broken login flows, missing access checks and exposed secrets.
I'm a senior engineer (~6 years, led a 10-engineer team, built backends serving) and I manually review your app before real users and real data touch it.
WHAT I CHECK
- Authentication and sessions: signup, login, password reset, token handling
- Authorization: can one user see or change another user's data?
- Business-logic flows: payments, orders, forms and roles work as intended end to end
- Input validation, API endpoints and error handling
- Exposed API keys, secrets and unsafe configuration
- Database queries, permissions and data handling
- Code quality and maintainability of the AI-generated code
WHAT YOU GET
- A clear written report with findings ranked by severity
- Exact steps to reproduce each problem
- Practical fix guidance (and optional fixes on request)
- A short walkthrough call (Standard and Premium)
STACKS I REVIEW
Python (FastAPI, Django), Java (Spring Boot), Node/Next.js, React, Postgres/MySQL/MongoDB.
IMPORTANT
This is an expert co
Get to know Saqib Z
AI Engineer, RAG Chatbots, LLM Agents with Python, Java Backends
- FromPakistan
- Member sinceJul 2019
- Last delivery2 years
Languages
Urdu, English
My Portfolio
FAQ
Do you fix the issues too?
The packages include findings and fix guidance. I can implement fixes as a custom offer.
Is this a penetration test?
No. It’s an engineering review of code, auth and flows. For formal pen-testing or compliance I’ll recommend a specialist.
Do you need my source code?
Yes, read-only access or a zip (and a test environment if possible). I keep everything confidential.
Which stacks do you support?
Python, Java, Node/Next.js and React backends, plus common databases.
