Product security
Security audit and beta launch of a consumer app
Full audit of a live consumer product before public beta, then the fixes, then the launch.
- Client
- Independent software product
- Period
- 2026
- Stack
- Next.js, Managed Postgres, Edge hosting, Node.js
The problem
A product about to open to the public had authentication, scoring integrity and media upload paths that had never been adversarially reviewed.
What I built
Audit of the running system, not the intended design. Account takeover path closed, score falsification closed, upload signing added, migrations and deploy order written down so the launch was a checklist rather than a night of improvisation.
Result
Launch blockers were reduced to a short list with an owner against each one.
Next.jsManaged PostgresEdge hostingNode.js
All projects