Urgent Security Audit: 2-Hour Next.js / PostgreSQL Repository Review

€8-30 EUR

In Progress

Posted about 3 hours ago

€8-30 EUR

Paid on delivery

We need a Senior Fullstack Security Engineer to perform an immediate, cold code audit on a private ZIP repository for a Proptech platform ([login to view URL] 15 monolithic architecture, PostgreSQL database, and Stripe Sandbox Integration). This is a pure white-box security audit. Your task will take approximately 2 hours of technical review. We do not require any coding or feature implementation. You must strictly audit the following parameters: 1. Stripe Webhook Security: Verify that the endpoint securely processes transaction events and check for vulnerabilities or bypass risks. 2. Role-Based Access Controls (RBAC): Audit the PostgreSQL database logic implementing the 7-tier role architecture to ensure clean fallback triggers (degrading failed payments to free roles instantly). 3. Code Hygiene: Scan the repository for hidden loops, potential backdoors, or hardcoded sensitive variables. Deliverables: A clean, 1-page flat summary report confirming if the backend structure is production-ready and fully secure. Budget is fixed at €30.00 net. Do not bid if you do not agree with this fixed budget. The repository is available immediately for review. We expect the report within 3 hours maximum after assignment.

Full Stack Development

Web Security

Technical Documentation

Software Testing

Penetration Testing

Project ID: 40693001

About the project

27 proposals

Remote project

Active 1 min ago

Looking to make some money?

Email address

Benefits of bidding on Freelancer

Set your budget and timeframe

Get paid for your work

Outline your proposal

It's free to sign up and bid on jobs

Awarded to:

@naminghn

Hi there, I can perform an immediate cold code audit of your [login to view URL] repository focusing on the specified security parameters. My experience includes comprehensive security audits and a solid understanding of role-based access controls and webhook security, particularly with Stripe integrations. I understand the urgency and will deliver a thorough 1-page report within the next 3 hours, confirming the production readiness and security of your backend structure. Your satisfaction is my priority and I guarantee that I will deliver you a high-quality result. Regards, Ali

€30 EUR in 1 day

5.0

(4 reviews)

2.4

27 freelancers are bidding on average €33 EUR for this job

@AnumFatima210

Hi, I went through your project details and understand what you're looking to achieve. I'd be interested in working with you on this. Based on the requirements you've shared, I can handle the project from start to completion while keeping the work aligned with your expectations, timeline, and desired outcome. My approach is straightforward: first, I'll make sure the requirements and expected deliverables are clear. Then I'll complete the work in structured stages, share progress along the way, incorporate your feedback, and deliver the final work after everything has been reviewed. Before we begin, I have a couple of questions about your requirements that will help me understand the scope more accurately. Feel free to message me so we can discuss the details and determine the best way to move forward. Best regards, Anum

€90 EUR in 1 day

5.0

(3 reviews)

3.0

@larencea30

Hi, the most important thing here is being tight and focused given the 2-hour scope - going deep on the three things that actually matter (webhook trust, RBAC fallback logic, hidden backdoors) rather than a broad surface-level pass. Here's how I'd approach it: - Check the Stripe webhook handler for signature verification, replay protection, and any way to spoof/bypass event validation - Trace the RBAC logic across the 7 tiers, specifically confirming failed payments degrade access immediately with no race condition or stale-session gap - Scan for hardcoded secrets, suspicious conditional logic, or anything that looks like a backdoor - Deliver the 1-page summary confirming production-readiness, flagging anything that isn't Can start on the repo right away. Is the RBAC degrade-on-failure logic triggered by the webhook itself, or a separate scheduled/cron check?

€20 EUR in 1 day

5.0

(1 review)

2.6

@anshuk358

Hi, I can help you with this project. I’m a Full Stack Developer with 5+ years of experience in PHP, Laravel, Node.js, React.js, WordPress, MySQL, MongoDB, APIs, and integrations. I can handle the complete development, from frontend and backend to testing and deployment. I’m available to start immediately. Let’s discuss the requirements.

€19 EUR in 7 days

0.0

(0 reviews)

0.0

@nisheshraghav

Hi, I can perform this cold code audit within your 3-hour window at the fixed €30 budget. Focus areas confirmed: Stripe webhook signature verification and bypass risk, RBAC fallback logic across the 7-tier role architecture (specifically instant degradation on failed payments), and a hygiene scan for hidden loops, backdoors, or hardcoded secrets across the repo. Deliverable: a clean 1-page summary confirming production-readiness, with clear pass/fail per parameter and any risks flagged for your team to address. Ready to start as soon as the repository is shared. Best regards, Nishesh

€19 EUR in 4 days