Security audit and secure code reviewI read your code before someone else does.
I review websites, online stores and apps for security holes, line by line. You get a plain report ranked by risk, at a fixed price. Then I’ll fix your code, or brief your team on how to fix it.
Latest hacks
What happened, how they got in and what it means for your site.
Binance
$6.3 billionMost of it moved in about 20 minutes. It may have begun with one laptop.
Node2Shell
Node.js 22, 24, 26A flaw in the Brotli decoder inside Node.js. On CISA’s list of exploited flaws.
PHP2Shell
7 in 10 websitesTwo critical PHP flaws under active attack, CISA confirms. Patched 21 October.
Denmark
8.8 million peopleNames, addresses and ID numbers, reached through one firm’s legitimate access.
Pick the depth
Start with a quick check, or go all the way through your code, cloud and systems.
Website check
from $1,200$1,700£900
1–2 days
Your site or store from the outside: headers, certificates, email protection, exposed files, plugins and versions.
Book a website checkCode review
from $3,900$5,400£2,900
About a week
One app, read line by line: login, permissions, payments, secrets and every dependency.
Book a code reviewFull audit
from $8,500$11,900£6,400
2–3 weeks
Code, cloud, CI/CD and hands-on testing on a staging copy. Report, fix plan and a retest.
Book a full auditSecurity watch
Monthly checks, an alert when a new flaw hits your stack, and Heimdall on your site.
$500$700£380 a month
Start security watchWhy you need this
- +One opening is enough.
A forgotten plugin, an old library or a password left in the code can hand someone your customers’ data. Most companies find out too late. A review finds it first.
- +I run what I review.
I build and run websites, stores and apps myself, so I know where the holes usually hide. I check your setup with Heimdall, my own security tool, then read what a scanner can’t.
- +Trained for exactly this.
I’m trained in DevSecOps and studied it alongside a full-time job building websites. You get someone who can find the hole, explain it and close it properly.
- +You get the fix, in plain language.
Every finding is explained and ranked by risk, so you know what to do first and what waiting could cost. Then I’ll fix your code, or brief your team on how to fix it.
Questions
What does a security audit include?
I look at your site or app from the outside, read the code and check how everything is set up. You get a report ranked by risk. Then I fix your code, or brief your team on how to fix it.
What does it cost?
A website check starts at $1,200, a code review at $3,900 and a full audit at $8,500, always at a fixed price. Here’s what affects the price.
Is this the same as a penetration test?
They overlap. A pen test tries to break in from the outside, and an audit also reads the code behind it. Here’s how to choose.
Do you need access to my code?
Not for a website check. A code review or full audit needs read access to the repository. You never need to send me production data.
Which systems do you work with?
PHP, Node.js, C#, SQL, WordPress, Shopify, React, Astro, Azure, Vercel and containers. Ask if yours isn’t on the list.
Can you help with cloud and DevSecOps?
Yes. A full audit covers your cloud setup and CI/CD pipeline, and I can harden both as part of the fix.
Let's talk
Pick what fits best, tell me a little about it, and I'll get back to you.
Contact
What happens next
- You tell me what you have.
- You get a fixed price.
- I start the work.