Browse categories
Explore
Fiverr Pro
English
$
USD
I will review login and access controls in one ai built web app feature
About this Gig
I review login and access controls around one agreed feature in a small AI built web app, using supplied code and redacted settings. I examine server-side permissions, ownership or tenant boundaries, data access and privileged credential handling.
You receive a written report with evidence references, priorities, recommendations and clear limits. USD 50; delivery within 3 calendar days after all required materials arrive. Includes one report clarification session of up to 30 minutes.
Implementation, extra scope and retesting require a separate paid agreement. No guarantee of safety, absence or discovery of vulnerabilities. No production attack testing. Customer data is sent to external AI only with separate explicit permission. Provide redacted material and test data, never passwords or secret key values. Message me before ordering to confirm scope.
Development technology:
Other
Expertise:
Other
My Portfolio
FAQ
What does the $50 service cover?
A source-code review of one agreed feature in a small AI generated web app, including relevant sanitized configuration, a written report, and one report clarification session of up to 30 minutes. Please confirm the stack and scope before ordering.
When does the 3-day delivery period start?
After all required materials are received: agreed feature scope, relevant code and dependencies, sanitized configuration, and authentication/data flow/deployment context.
Does this guarantee safety or finding vulnerabilities?
No. This limited code review does not guarantee safety, a vulnerability-free app, or discovery of vulnerabilities. It is not a full security audit or penetration test. The report describes the reviewed scope, observations, and limitations.
Are fixes or re-testing included?
No. Implementation fixes, added scope, and re-testing after changes require a separate paid agreement. The included 30-minute clarification session explains the delivered report only. It does not include implementation or a second review.
Will you attack production or send data to external AI?
No production attack testing is performed. Client data will not be sent to external AI services without separate, explicit permission. Remove secrets and real customer records from all materials you provide.
