security-review

Review authentication code for security vulnerabilities by checking secure session handling, enforcing secrets hygiene, and validating user inputs to prevent unauthorized access before deployment.

Input validation prevents SQL injection and XSS in API endpoints by enforcing parameterized queries and sanitizing user inputs, ensuring malicious data is neutralized before processing.

Yes, you can check hardcoded credentials and secrets hygiene by reviewing environment-based configuration to ensure sensitive data is not exposed before merging code.

Secure file uploads and payment integrations by reviewing third-party integrations for rate limiting, input validation, and safe data exposure defenses to prevent unauthorized actions.

Yes, this security review covers CSRF defenses and dependency checks to enforce rate limiting, secure session handling, and protect against known vulnerabilities in external libraries.

You need a security review for sensitive code paths when implementing login flows, admin actions, API endpoints, or third-party integrations to catch security risks before deployment.