Shipped products scored from the outside, on public surface only — what a customer can see, with no access and no benefit of the doubt. Every finding carries a confidence marker and points at a saved evidence run. Why the series exists.
An active product with paying customers and a massive security issue 36.5/100 — Broken. An anonymous visitor can read customer records and secret keys straight from the database — reported privately, and the operator declined to fix it.
A subscription tracker asking for your financial data, scored from the outside. 29/100 — Broken. Manual entry as the only way in, contact addresses that bounce or reach a stranger, a template placeholder live in the privacy policy, and a backend that stopped resolving.
Service
A two-week review of code quality, security, and maintainability, with evidence and ranked remediation priorities.
See scope and deliverables →