I will audit and secure your ai generated web app before launch

Your app works. That is not the same as your app being safe to launch.

Lovable, Cursor and Replit are good at producing something that runs. They are worse at producing something that survives real users, real payments and real data. The code looks clean, so problems stay invisible until they get expensive.

What I keep finding:

- API keys sitting in the frontend, readable by anyone who opens devtools

- Supabase tables with RLS off, letting any user read everyone else's rows

- Auth checked in the UI only, so the endpoint underneath is wide open

- Webhooks with no signature verification

- Queries fine at 100 rows that collapse at 100,000

WHAT YOU GET

A report listing every issue with a severity rating, what an attacker or traffic spike would do with it, and the exact fix: file, line, corrected code. Standard and Premium include me implementing and testing those fixes.

WHY ME

Computer Science degree, University of Dhaka. I build production systems in React, Node and PostgreSQL, and I have published research on deep learning for constrained hardware, where a subtle bug throws no error and silently returns wrong results.