Skip to content
Now boarding New: Mobile & Desktop platform and an open-fare snippet depot — pay €1 to €100. See new lines Code WELCOME10 takes 10% off your first ticket · 14-day refund

Line KJ-130 Platform 8 · Security & Audit Kits

Security Audit Express for Web Apps

A guided, two-day security review for your own web app: 140 checks, scripts and a report template.

Rated 5.0 out of 5 from 1 review 193 builders

LH Maintained by Lars Holm

  • Last updated October 2026
  • English
  • 1h 36m of walkthroughs
  • 54 files

What you get

5 items in the box

Every bullet below is in the download, working, the moment your payment clears.

  • 140 checks across twelve risk areas, each with a reason and a fix
  • Scripts for headers, TLS, exposed files and cookie flags
  • Dependency vulnerability scanning
  • A two-day audit schedule
  • A prioritised report template

What's in the box

4 parts · 54 files · 1h 36m of walkthroughs

6 files with a 12m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.

The full file tree and the walkthroughs are in your download, available straight after checkout.

18 files with a 34m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.

The full file tree and the walkthroughs are in your download, available straight after checkout.

16 files with a 29m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.

The full file tree and the walkthroughs are in your download, available straight after checkout.

14 files with a 21m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.

The full file tree and the walkthroughs are in your download, available straight after checkout.

4 parts · 54 files

1h 36m total length

You will need

Short list, and deliberately so. If you meet these you can start today.

  • Access to a web application you are authorised to test

About this product

Audit Express is the review Lars would run if you hired him for two days, packaged so your own team can run it. One hundred and forty checks are grouped into twelve areas — authentication, sessions, access control, input handling, file uploads, APIs, secrets, dependencies, headers, logging, infrastructure and business logic — each with a reason, a way to test it and a fix.

Helper scripts automate the mechanical checks: security headers, TLS configuration, exposed files, cookie flags and known-vulnerable dependencies. A report template turns findings into a prioritised plan you can hand to management.

Frequently asked questions

Still unsure about something? Write to our contact page and a human answers, usually the same working day.

It is a structured self-review. It catches most common issues but is not a substitute for an independent test before a major launch.

Checkout is handled on our provider's secure payment page. The moment your payment clears we email your personal access link and access code to the address you used at checkout, and the same link appears in your account library. There is nothing to install and nothing to wait for.

Email within 14 days of your purchase, quote your order number, and we refund the full amount to your original payment method. No form to fill in and no questions about how much of the product you watched.

What builders say

Reviews are written by people who bought this product. We publish the critical ones too.

5.0

Rated 5.0 out of 5

Product rating · 1 review

Rating distribution

  • 5 stars 100%
  • 4 stars 0%
  • 3 stars 0%
  • 2 stars 0%
  • 1 star 0%
  • KL

    Kristjan Lepp

    CTO

    Sep 2026
    Rated 5.0 out of 5

    Found three real issues

    We ran the two-day schedule as a team and found an IDOR, a missing cookie flag and an exposed backup file. The report template made the board conversation easy.

Your maker

LH

Lars Holm

Go and Rust engineer with a security habit

  • 2,427 builders aboard
  • 11 products published
  • 5.0 maker rating
  • Go
  • Rust
  • PostgreSQL
  • Application security
  • Linux hardening

Lars started out in penetration testing and moved into backend engineering, so he writes Go services the way an attacker would read them. He maintains the Go API and Postgres tenancy modules and the whole Security line. His audit kits explain the reason behind every check, because a checklist nobody understands gets skipped.

€66 EUR

One-time payment · lifetime access

Timetable updates

New lines, first. One email when something departs.

Release notes for new products and major updates to the ones you own, plus launch fares for subscribers. No digest padding, unsubscribe in one click.

By subscribing you agree to our Privacy Policy.