Security audit of your web app or API – OAuth, auth flows, misconfigs – 99 USD in BTC

I will audit your web application or API for security issues and deliver a written report with reproducible evidence within 48 hours.

What is included:
– Authentication and session management review (login flows, token handling, password reset)
– OAuth 2.0 and API security review (redirect URIs, scopes, client secrets exposure, PKCE)
– Common misconfigurations (CORS, security headers, exposed debug endpoints, directory listing)
– Input validation spot checks (injection, XSS in reflected/stored contexts)
– Prioritized findings list with severity, impact and fix guidance

Deliverables:
– PDF/Markdown report with step-by-step reproduction for each finding
– Quick-win hardening checklist for your stack
– 30 min follow-up message thread to clarify fixes

Stack experience: JavaScript/Node, Python/Django/FastAPI, PHP, Nginx/Apache, Docker. GitHub portfolio available on request.

Price: 99 USD payable in BTC, Lightning or USDT. Small scopes (single endpoint or one auth flow) from 49 USD. Larger engagements quoted after scoping message.

To start, apply with a short description of your app and the URL or repo you want reviewed.