Contact
Building on Next.js × Supabase and want the authorization/RLS risks closed before launch? Start with a free 30-minute consult — or send the details below.
아래 양식을 작성해 보내 주세요. 영업일 기준 2일 이내에 답장드립니다.
창구는 한 사람. 결과물은 다른 엔지니어가 이어받을 수 있는 형태로 귀사에 남깁니다.
- 리포지토리와 클라우드는 첫날부터 귀사 명의
- 인수인계 자료를 기본으로 납품
- 인프라는 코드로 관리 (IaC)
- 자동 테스트와 CI를 기본 탑재
도급(고정 범위) 계약은 검수 후 3개월 이내에 발견된 결함을 무상으로 수정합니다(계약 부적합 책임). NDA는 첫 미팅 전부터 체결할 수 있으며, 결과물의 저작권은 원칙적으로 귀사에 귀속됩니다.
Security audit (Next.js × Supabase)
RLS/authorization review, tenant-isolation checks, and the IDOR and business-logic risks a scanner can only flag. Fixed scope, report plus fixes.
Technical advisor
Architecture, tech selection, code review, performance. Ongoing support for your team.
Project (fixed scope)
New SaaS builds, AI-powered systems, zero-to-one. Requirements through infrastructure, end to end.
Q. How does the audit relate to Aegis, the open-source toolkit?
A. Aegis automates the horizontal controls (headers/CSP, rate limiting, validation, CSRF, secrets hygiene) and flags the vertical risks it cannot fix — authorization/RLS design, tenant isolation, business logic. The audit is a human closing exactly those. It complements secure design; it does not replace it.
Q. What's the turnaround?
A. A spot review takes a few days; a standard audit is roughly 1–2 weeks depending on surface area. I confirm scope and timeline with you before any work begins.
Q. Do you work remotely?
A. Yes — fully remote and async-friendly, across time zones.
Q. Can we sign an NDA first?
A. Yes, before any scoping call. Your template or mine.
If a form is not your thing, reach me directly at the address below.