Practical code security before launch.
Practical Quick Scan First guides for GitHub repository security, exposed API keys, database access and safer pre-launch code review.
Security checklist
GitHub security checklist before launching a web app
A practical repository security checklist for secrets, access control, database rules, dependencies, payments and production configuration.
Read guide →
Incident guide
How to remove an exposed API key from GitHub safely
The correct order for revoking, rotating, removing and investigating a secret committed to a GitHub repository.
Read guide →
Database security
Firebase and Supabase security rules to check before launch
Review Firebase rules, Supabase Row Level Security and ownership policies before a web app reaches production.
Read guide →