01
What we look at
Reviews focus on the issues that most often separate a working prototype from a production app.
- Authentication and session handling
- Authorization: can one user or account see another’s data?
- Database access rules and exposed endpoints
- Secrets, API keys and environment configuration
- Dependencies with known vulnerabilities
- Backups, restore ability and environment separation
- Logging, monitoring and error handling
- What data is sent to AI tools and third parties