The Sunday Review

Someone reads it,
and puts their name on it.

The scan is a machine and the Sprint is a course. This is me — Seth — reading your specific app, in writing, and telling you what I actually think.

Book the Sunday Review — $149

Includes the Sunday Sprint ($39 on its own). One payment, no subscription. Seven days to change your mind — see below for how that works once I've already replied.

Pay with a different email

What I do

Four things, all of them by hand.

I read your re-scan
You run the Exposure Scan, do the Sprint, and run it again. I read both — what was open, what you closed, and what the scan can't see from outside. That before-and-after is the most useful thing you can hand me, and it costs you nothing to produce.
I read your three critical screens
You tell me the three screens you would least like to see described in a news story — usually the admin view, the billing flow, and wherever other people's data is listed. I look at how those are protected, and whether the protection is enforced where it has to be rather than where it's convenient.
I read your stack
Supabase policies, Firebase rules, the server/client split, whatever you're actually on. Not a generic checklist — the specific thing you built, in the specific place you built it.
I reply in writing, within five days
Written notes, in plain language, that you can forward to an investor, a customer, or whoever asked you the question that brought you here. Not a call you have to take notes in. Something you can hand somebody.

And a dated sign-off

If your re-scan comes back clean, I sign a dated “Locked down by Sunday”note with my own name on it. It says what I looked at and when — which is what makes it worth anything. A badge that says “secure” with nobody's name behind it is decoration.

What it isn't

The three things I won't let you buy this thinking it is.

Not a penetration test. I do not attack your app. Nobody is trying to break in on your behalf, and there is no exploit at the end of it. If your customer's contract requires a pen test, this is not it — hire a firm that does them.
Not a compliance artifact. It is not SOC 2, ISO 27001, HIPAA, or any other audit an assessor will accept. It is one person's written opinion, honestly labelled as one. If you need a certificate, this is the wrong $149.
Not a guarantee. Nothing I write makes your app unbreakable, and I will never tell you it's secure. What I will tell you is what I looked at, what I found, and what I'd fix first — and I'll say plainly when something is outside what I can see.

What you send me

Your scan link, the three screens, and read access to whatever you're comfortable sharing — a repo, a set of screenshots, or just a description. More access means a better review, and none of it is required. I'll tell you what I couldn't see rather than guess at it.

The order of operations

Buy, get the Sprint immediately, do the work, re-scan, then send. There's no expiry on the sending part — take a month if you need one. The five days are counted from when your material lands with me, not from when you paid.

One app. One person.
One written answer.

Book the Sunday Review — $149

Pay with a different email

The Sprint on its own is $39, and thescan and the check are free — start there if you're not sure yet.

Refundable within seven days, and specifically: refundable in full any time before I've sent my reply, even if that's later than sevendays, because you shouldn't pay for work I haven't done yet. Full policy on therefunds page.

Someone reads it,and puts their name on it.

Four things, all of them by hand.

I read your re-scan

I read your three critical screens

I read your stack

I reply in writing, within five days

The three things I won't let you buy this thinking it is.

One app. One person.One written answer.

Someone reads it,
and puts their name on it.

One app. One person.
One written answer.