Browse categories
Explore
Fiverr Pro
English
$
USD
I will do a basic security check on your vibe coded app
About this Gig
Your app runs but did the AI leave a door open?
Roughly one in three AI-built apps ships with a serious flaw. Most are the same basic mistakes over and over. I catch them before someone else does.
What I check (surface-level, non-destructive):
- Exposed secrets API keys or credentials in your frontend
- Forgotten endpoints, exposed .env / .git / debug pages
- Missing security headers (HSTS, CSP, X-Frame-Options)
- HTTPS / TLS basics and cookie flags
- Simple and basic IDOR check
- Login handling logout, brute-force protection, info leaks
- Debug output that exposes internals
- Obvious reflected XSS in input fields
What you get: A PDF report with a plain-language summary and a technical section: each finding rated by risk, with reproduction steps and a clear fix direction.
Not included: full pen test, source-code audit or compliance certification. I explain the issues; implementation stays on your side. Need a deep access-control / IDOR audit? See my dedicated gig.
By ordering you confirm you are the owner or authorized rep and accept responsibility for authorization. Message me first I review each order individually, ask for written authorization with your name, and may request proof of owners
FAQ
Do you fix the issues too?
I don't fix the issues directly. For each finding I explain the problem, its risk, and the right direction to fix it (concept + reference), so you or your developer can implement it. Exact code depends on your stack.
Is this legal?
Yes. I only test apps you own or are authorized to test, and we confirm that in writing with your name before I start.
Which frameworks do you support?
Any (Next.js, Supabase, Firebase, etc.). I test the running behavior, not the tool.
Do you accept every order?
I review each request individually and confirm whether I take it on before starting, so we are aligned on scope from the start.
What if you find nothing?
That is a good result — you get a clean report as proof your basics are solid, listing everything I checked.
