Secure

Run a security audit on the codebase and fix what matters first. AI-built apps fail in a few predictable places. Check those places, prove each finding, and fix it.

Step 1: Map the app

Read the code and list, briefly:

• the framework, and where the server code runs
• the database, and whether the browser talks to it directly
• how users log in
• every API route, server action, and webhook endpoint
• every third-party key the app uses
• every call that costs money: AI models, email, SMS

Step 2: Run the checks, worst damage first