Security and audits
Application security, code review and GDPR compliance.
Security is not a wish list at the end of a project. I check where data and users are genuinely exposed and help fix it in order of the biggest risk.
I offer audits of existing applications, vulnerability-focused code reviews and support in implementing secure practices. Every audit ends with a report and a concrete remediation plan - no fear-mongering and no unnecessary tools.
Included
- Source code audit
- Authentication and permission review
- Common vulnerability testing (OWASP)
- GDPR compliance review
- Configuration and deployment hardening
- Report and remediation plan
What you receive
- Audit report with priorities
- A list of concrete recommendations
- Remediation plan with time estimates
- Results consultation (30–60 min)
Questions about this service
Is the audit confidential?
Yes. We sign an NDA before we start, and access to code and environments is kept to a minimum. The report goes only to you.
Will you fix the issues you find?
I can. Audit and remediation are separate stages - first you learn the risks and priorities, then you decide what we fix and in what order.
Does an audit replace penetration testing?
A code audit and configuration review are not the same as a full pentest. If you need penetration testing, I will say so and help you choose the right provider.
Explore the other areas.
Let’s talk about your project.
Briefly describe what you need. I reply within one business day and suggest a free consultation.
If the project does not make sense, I will tell you straight.