I will do a secure code review and fix the vulnerabilities in your web app

I find and fix real security bugs in web applications, APIs, and WordPress plugins, and I hand you a clear report plus working fixes, not a scary PDF you cannot act on.

What you get: every finding with the exact location, why it is exploitable, and how to fix it, then the fix itself as a patch or pull request that builds and passes your tests.

I focus on the bugs that actually matter: broken access control and authorization, injection, SSRF, insecure defaults, and dependency risks. My open-source security work is public at research.itsjustin.me.

This is authorized, defensive security only. I review code you own or are clearly authorized to have reviewed. I do not attack live systems or third-party targets.

Message me first with your stack and roughly how large the codebase is, and I will tell you honestly which package fits and what I can commit to.