What it covers
- Findings register — Severity, status, evidence, fix — one row per issue.
- Money-path review — Payments, webhooks, refunds, crons, auth on every endpoint.
- Privacy — Consent wiring, data residency, retention.
How we work
We don't change anything during the audit. You get the register, we agree the order, then we fix.
