I will review your source code for security vulnerabilities

Automated scanners produce noise. This is a manual, line-by-line security review of your source code by a penetration tester, combined with SAST tooling, so you get findings your developers can actually act on.

I review for:

- Authentication and session management flaws

- Authorization and access-control gaps (IDOR, BOLA, BFLA)

- Injection: SQL, NoSQL, command, template and LDAP

- Unsafe deserialization and file upload handling

- Secrets and credentials committed to the repository

- Cryptographic misuse and weak randomness

- Dependency and supply-chain risk

- Logging, error handling and data exposure

Each finding includes the file and line reference, a clear explanation, proof of concept where safe, severity (CVSS 3.1) and a code-level remediation example. I can follow your stack: Python, Node.js, PHP, Java, .NET, Go, Ruby or TypeScript.

Basic: up to 5,000 lines, one language.

Standard: up to 20,000 lines, two languages, dependency review.

Premium: up to 50,000 lines, full manual review, remediation workshop and retest.

Send me the repository link or an archive, plus a short note on what worries you most.