SecurebySunday

What you get

The check is free.
The fix is $20, once.

Two different things, and it's worth being clear which is which — the score and every finding cost nothing and stay that way. The $20 is for closing them.

Free

The Exposure Check

No signup, no card, no scanning.

  • 13 questions — 16 if you name two backends. Plain language, no jargon.
  • An Exposure Score out of 100. Lower is better.
  • Every finding, in full. The title and the whole explanation — not a teaser, not a locked preview, not three free and the rest behind an email.
  • Which module fixes each one, named — so you can see what you'd be buying before you buy it.
  • Answers are scored in your browser. Nothing touches your app.
  • Optionally emailed to you — same content, costs an address rather than money.
Take the free check

$20 once

The Sunday Sprint

A course and a prompt kit — not a report.

  • 8 core modules that apply to any stack.
  • Your stack's track. 5 exist: Supabase, Firebase, Next.js / Vercel, Lovable · Bolt · v0 · Base44 · Replit, Azure.
  • 5 standalone audit prompts, one per stack — paste into Cursor or Claude and it audits the whole backend in a pass.
  • Three prompts in every module — one to audit, one to fix, one to prove the fix worked. Across all 19 modules.
  • It works on the next project too. This is the part people miss: you're not buying one report about one app. The prompts and the modules apply to whatever you build after this.
  • One payment, no subscription, access for at least 12 months,seven days to change your mind.
See everything inside — $20

The line between them

The free check tells you what is wrong and where it lives. The Sprint tells you how to fix it — in your stack's specific terms, with prompts you hand to the same AI that built the thing.

What it isn't

  • Nothing is scanned. The score comes from your answers, not from touching your app. That's deliberate — it means you can run it without handing anyone access to anything.
  • It's a snapshot, not monitoring. Nothing watches your app after you close the tab.
  • Step-by-step instructions exist for 5 stacks.On AWS, or a server you run yourself, the core modules and the prompts still apply — but you'd be adapting the vendor-specific parts yourself.
  • Not a penetration test, and not a compliance artifact. If you need something to hand an auditor, this is the wrong $20.

Still deciding? Take the check first — it's free, it takes about three minutes, and you'll see your actual findings before you spend anything.