Build
Websites, web apps and mobile apps.Built by someone who tests security for a living.
I know which mistakes get sites broken into, and I leave them out.
The checklist
What “built by a security tester” means here
- Secrets stay out of the code that runs in the browser.
- Access rules are enforced on the server, not only hidden in the interface.
- Admin areas are not left open, guessable or unprotected.
- Security headers, HTTPS and cookies are set properly.
- No test files, backups or version-control folders left on the live server.
- Dependencies and plugins are kept current under a care plan.
I check my own work with the same checklist I use on clients.
What I build
- Websites
- Marketing sites, content sites, online stores.
- Web apps
- Dashboards, portals, internal tools, customer-facing products with logins.
- Mobile apps
- Hosting and care plans
- Updates, backups, monitoring, and someone to call.
How it works
- 01We talk about what you need.
- 02I send a written quote and timeline.
- 03I build, and show you progress.
- 04Launch. I test the live site before and after.
- 05Optional care plan: hosting, updates, backups and monitoring.
Already have a site?
I can test it first. A security assessment tells you what to fix, and I can fix it.