A source code review of your own code
If you have your own source code, I go through it looking for security flaws. It finds flaws that cannot be seen from the outside. Can be added to any package.
A pentest looks at the system from the outside, like an attacker. A source code review looks at the code itself. It finds things like passwords and keys written directly into the code, unsafe handling of input and outdated libraries.
The review is also called code scanning or SAST. You get a separate report with the findings, where in the code they are, and what your developer should do. It requires that you give me read access to the code.
Requires that you give me access to the code.
A good fit if
- You have had your own website, webshop or app developed
- Your developer wants concrete findings with file and line
- You want to catch flaws before they reach your users
Questions about the package
Can we buy a source code review on its own?
It is meant as an add-on to one of the packages, because the two complement each other. Write to me if you only want the code reviewed, and we will work it out.
What happens to our code?
It stays between us and is used only for the job. My access is closed and copies are deleted when the job is finished.
We use WordPress or Shopify. Does it make sense?
Only if you have your own plugins or a custom theme with code. The standard platform itself is tested in the packages.
Tell me about your website
Write briefly what you have and what worries you. I will get back to you with a proposal and a quote.
Reply within 1-2 working days.