Free check-up
A free 20-minute check-up of your API or web app.
Send a URL. I run a short, non-intrusive review and send written findings, then we walk through them in a 20-minute call. No obligation.
What you get
- Short written findings (1–2 pages) within 2 business days
- Each finding with evidence (request/response, screenshot or timing) and a suggested next step
- A 20-minute call to walk through the findings and answer questions
- An honest view of whether a full engagement makes sense — or not
What I need from you
- The URL of the API or web app (staging preferred)
- API docs or an OpenAPI spec, if you have one
- Optional: a test account with non-production data
- Confirmation that you are authorised to request testing of this system
Scope limits
- Non-intrusive only: normal-rate requests, reading public docs and responses, TLS and header checks, a small latency sample.
- No load or stress testing — and nothing against production beyond normal usage without your written consent.
- No exploitation of vulnerabilities and no access to other users' data. Suspected security issues are reported to you, not tested further.
- Roughly two hours of work: it surfaces the obvious risks, it is not a full audit.