Browse categories
Explore
Fiverr Pro
English
$
USD
I will secure your vibe coded app from code to deploy
Nipuna Kaweya
About this gig
Your AI-built app works. But is it safe?
Tools like Cursor, Lovable, Bolt, and Replit build fast, but they often leave security holes that attackers love. I'll find and fix them at every layer, from your code to your live deployment.
What I secure:
- Code: exposed API keys, hardcoded secrets, injection risks, missing input validation
- Login: broken authentication, weak sessions, missing access control
- Database: Supabase RLS and Firebase rules that leak user data
- APIs: missing rate limiting, open endpoints, CORS mistakes
- Deployment: SSL/TLS, security headers, environment variables, firewall rules
Why choose me?
- Professional application security experience
- Published security researcher
- Fixes based on OWASP Top 10 best practices
You get: secure, fixed code, a report of every issue found and fixed, and clear steps to keep your app safe.
Revisions cover changes within the original scope.
Please contact me before placing an order so I can review your app and recommend the right package.
Get to know Nipuna Kaweya
Nipuna Kaweya
AppSec Engineer, Secure Code Review and Vibe Coded App Cleanup
- FromSri Lanka
- Member sinceOct 2026
Languages
English
Hi, I’m Nipuna Kaweya Prabashwara, a professional Application Security Engineer and part-time academic security researcher. I help businesses and developers build secure, reliable software. My services include application security testing, secure code review, fixing vulnerabilities, and cleaning up vibe-coded apps by optimizing performance and hardening security. I also guide students through coding assignments and research projects with clear, practical support. Let’s make your app safe and solid!
FAQ
How do I know if my app has security problems?
Most AI-built apps have at least one, often exposed keys or open database rules. Message me and I’ll take a quick look before you order.
Which platforms do you work with?
Apps from Cursor, Lovable, Bolt, Replit, and similar tools, commonly using React, Next.js, Node.js, Supabase, and Firebase.
Will you break my app while fixing it?
No. I test every fix to make sure your features still work, and I explain each change.
Do you secure the deployment too?
Yes. I check SSL/TLS, security headers, environment variables, and firewall settings on platforms like Vercel, Netlify, Cloudflare, and VPS servers.
What’s in the security report?
Each issue found, its severity, what I fixed, and steps to keep your app secure going forward.
Is my code kept confidential?
Yes. I only use your code for your project and don’t share it.
