Security Review

Overview

Comprehensive security audit for startup MVPs before going live. Covers the most critical vulnerabilities that affect early-stage apps. Run this after the app is built but before launch - it pairs with the pre-launch checklist in /launch-planner.

Outputs a SECURITY-REPORT.md after all areas are reviewed.

Prerequisites

Ask the user for:

• Tech stack (frontend framework, backend language/framework)
• Database (Supabase/Postgres, MySQL, MongoDB, Firebase, etc.)
• Auth provider (Supabase Auth, Clerk, Auth0, NextAuth, custom, etc.)
• API type (REST, GraphQL, tRPC, server actions)
• Hosting target (Vercel, Railway, Fly.io, AWS, etc.)
• Any known concerns or areas they're unsure about

Ask them to share relevant code files or paste code snippets as each area is reviewed.