// free security review planner

Plan your next security review.

Tell us what your app does. We’ll suggest things to check and show you how to get started, with steps, tools, and AI prompts you can copy.

← Security reviews

Build from high-level feature choices and export your checklist as Markdown.

Your review plan

5 recommended checks

Here are checks for the features you chose, plus a few basics for any app. Open a check for instructions and an AI prompt. Use test accounts, and only test systems you have permission to review.

Keep notes on what you tried and what happened. If an AI tool flags a possible issue, check it before treating it as a confirmed problem.

Use the MCP guide and keep your findings local →

Want a hand with the review?

I can help you decide where to start, check possible issues, and work on fixes. Bring your checklist and whatever questions came up.

Discuss this review How a review works

Plan your next security review.

Your review plan

Accounts & dataCheck who can see and change each recordBeing signed in should not give someone access to everyone’s data. Check each action using accounts with different permissions.01

Accounts & dataCheck admin actions without using the buttonsHiding an admin button helps keep the screen tidy. The server still needs to check permissions when someone sends the same request directly.02

Every applicationKeep private API keys out of public codeSome keys are meant to be public. Others give access to private data or paid services. Check which ones your app shares with the browser.03

Every applicationCheck security alerts in the libraries you useA dependency scanner may return a long list. Check the versions you actually use and how your app uses them to decide what needs fixing.04

Every applicationCheck the settings of the running appThe code is only part of the picture. Check what is publicly accessible, who has admin access, and what your app records in logs.05

Want a hand with the review?