Browse categories
Explore
Fiverr Pro
English
$
USD
I will test your web app for access control and security bugs
React, Firebase developer, web scraping, app security
Hi, I'm Emma, a developer from Vietnam. I build and run a real production app for a retail business on React, Vite, Tailwind and Firebase (Firestore, Cloud Functions, security rules), with POS, invent...
About this Gig
Worried that one user can see or change another user's data? I test web apps for broken access control, one of the most common and serious security bugs.
What I test:
- IDOR: changing an ID in a URL or API call to reach someone else's data
- Role and permission checks (user vs admin)
- API endpoints that skip authorization
- Firebase / Firestore security rules
What you get:
- A clear report with each issue, its risk level and steps to reproduce
- Annotated screenshots
- Practical fix suggestions for your developers
I build and run a production React + Firebase app and do authorized bug bounty testing, so I know where these bugs usually hide.
Rules I follow:
- I only test apps you own or are authorized to test
- Please give me test accounts, not real user accounts
- No destructive actions, no data deletion, no load attacks
Message me first with your app type and what you want tested.
Testing application:
Web application
Development technology:
JavaScript
•
Node.js
•
NoSQL
•
React
•
TypeScript
Device:
PC
FAQ
What do you need from me?
The app URL, 2 test accounts with different roles, and the list of pages or API endpoints to test.
Will testing break my app?
No. I only do safe, non-destructive checks and never delete or change real data.
Do you fix the bugs too?
The report includes fix suggestions. If you want me to fix them, we can agree on that as a separate order.
