I will perform a secure code review of your app

Is your application ready for production, a client audit or a funding round? I review your source code for security flaws before attackers, or auditors, find them.

I'm an application security engineer with 6 years of experience, coming from Java fullstack development, and a certified Checkmarx SAST Engineer. I read your code the way a developer does and report it the way a security team needs.

What I do:

• Manual review of Java 8/17/21, Spring and Jakarta EE code: REST APIs, authentication, access control, input validation, data access, secrets handling
• Checks against OWASP Top 10 and ASVS
• Automated scans (SonarQube, Checkmarx, Dependency-Check, Trivy) with false positives removed
• Prioritised findings with severity, location and a concrete fix

What you get:

• A clear report for developers and management
• Fix recommendations with code examples
• A live debrief to walk through the findings

Defensive work only: no penetration testing, no live systems.

Message me before ordering with your stack and repo size so I can confirm the scope.