Independent app security reviews for founders
Before you trust your app with real users, get a scoped review of sign in, permissions, data access and payments. Get a private report with evidence, priorities and practical fixes your developer or coding agent can use.
Automated checks from $99. Tier 1 reviews from $999. Tier 2 from $1,999.
See a sample reportFree readiness checklist. No email required. No security verdict or badge implied.
The report connects each finding to the reviewed code or control, explains its impact and gives you a practical fix. Start with the issues that matter most.
Tier 1 includes reviewer judgment on the agreed source and build output. Tier 2 adds bounded checks of an expressly authorized test deployment. The lower-cost automated check is spot-checked before release and does not earn a badge.
Read the demonstration reportDemonstration report. Synthetic application, not a customer engagement.
The synthetic endpoint checks for a signed in user but does not check who owns the requested project.
Fix: enforce ownership in the database query, then test with two separate accounts.
Illustration only. Your app has not been examined.
Five questions. Ready apps continue straight into review intake. Otherwise, get a preparation checklist. No email required.
This uses your self-reported answers. It does not inspect your app, assess its security, confirm scope or create a paid order. Don’t enter credentials or private customer data.
Tier 2 also needs a test deployment you own and explicit permission for the agreed checks.
Small means up to 10,000 first party source lines, 10 backend entry points and two roles. Standard means up to 40,000 lines, 30 entry points and three roles. Your largest count sets the band.
| Plan | App size | Total price | Due now | Remaining balance |
|---|---|---|---|---|
| Automated check | small | $99 | $99 | $0 |
| Automated check | standard | $199 | $199 | $0 |
| Automated check | larger | $299 | $299 | $0 |
| Tier 1 review | small | $999 | $499.50 | $499.50 |
| Tier 1 review | standard | $1,499 | $749.50 | $749.50 |
| Tier 2 review | small | $1,999 | $999.50 | $999.50 |
| Tier 2 review | standard | $2,499 | $1,249.50 | $1,249.50 |
| Re-review | small | $299 | $299 | $0 |
| Re-review | standard | $499 | $499 | $0 |
Tier 1 and Tier 2 take a 50% deposit. The balance is due after assessment confirms scope and the review is scheduled. Larger reviewed apps and larger re-reviews need an accepted quote before any payment.
Automated checks and re-reviews are paid in full. Re-review covers changes to the same app reviewed within 90 days; prior-review eligibility is checked before payment.
An eligible paid automated check can be credited once toward a Tier 1 or Tier 2 review of the same app bought within 30 days. We verify the prior purchase and show the credit before you sign. There is no public coupon.
Tier 1
Review of agreed repository and build output, including applicable secrets, dependencies, code patterns, auth and data access paths. No active deployment testing.
Badge example. Payment does not purchase a passing result.
Tier 2
The source review plus agreed, bounded checks against an authorized test deployment, including applicable headers, cookies, exposed artifacts and other listed controls.
Badge example. Payment does not purchase a passing result.
Choose an automated check or review, connect your stack or arrange access another way, then confirm your app size and agreement.
Tier 1 and Tier 2 begin with a 50% deposit. Automated checks and eligible re-reviews are paid in full. Larger reviewed apps are quoted before payment.
Get prioritized findings and practical fix prompts. Tier 1 and Tier 2 include one verification of submitted fixes. Automated checks do not include a badge.
Standard scope covers one app, one backend and datastore, up to 40,000 first party source lines, 30 backend entry points, three permission roles and five agreed workflows. Estimates are checked during assessment.
Tier 1 and Tier 2, after documented assessment: If you cancel or decline a substantiated scope correction before substantive review, we retain $150 for small apps or $300 for standard apps and refund the rest of the deposit. A quote alone does not earn that fee.
Cancel before assessment, or Certari cannot deliver: Full refund of what you paid under the agreement's cancellation terms.
App or access not ready: Known problems are addressed before charging. If a documented assessment later finds insufficient access or readiness, the same fixed assessment fee applies. Missing information gets a written checklist and response windows before closure.
Automated checks and re-reviews: Full refund if Certari cannot run the service. No refund once the report is delivered. Tier 1 and Tier 2 assessment fees do not apply to these products.
Extra fees need your written approval. No automatic renewal, no undisclosed processing deduction from these refunds, and no charge for an obvious readiness issue disclosed before intake. The full agreement is shown before payment.
Tier 1 reviews agreed source and build output with reviewer judgment on secrets, dependencies, sign in, permissions and data access. Its engine does not contact a deployment. Both tiers can use separately authorized Supabase configuration snapshots. Tier 2 adds expressly authorized, bounded staging checks. Neither is an exhaustive penetration test.
It runs engine checks against the supplied source and approved connected evidence, with fix prompts and a spot-check before release. It does not include the Tier 1 or Tier 2 reviewer sign-off, included fix verification or a badge. External AI processing still requires separate express approval.
Small is up to 10,000 first party source lines, 10 backend entry points and two roles. Standard is up to 40,000 lines, 30 entry points and three roles. The largest count sets the band. Reviewed scope covers one app, backend, datastore and repository, five workflows, one auth provider, one payment provider, three other material integrations and one staging origin. Larger reviewed scopes need an accepted quote before payment.
Yes, we need reviewable source and the relevant configuration and permissions. A public URL alone is not enough. Connect your repository or arrange access through the agreed secure channel. Never put credentials in the form. If your platform cannot provide source, confirm feasibility before paying.
Signup, account connections and payment do not authorize live testing. Tier 2 uses an expressly authorized staging target with agreed hosts, request limits and a stop contact. Default checks use GET, HEAD and schema-only GraphQL introspection. Production writes, destructive testing and denial of service are excluded unless separately authorized in writing.
An issued badge records an eligible review of the stated version and scope. It does not guarantee security or compliance. With your public-listing approval, anyone can follow its link to the scope, tier, date, limitations, status and expiry. The display license lasts up to 90 days and can be suspended or revoked. Automated checks never earn a badge.
A private Markdown report with reviewed scope and versions, evidence, severity, prioritized fixes and coding-agent prompts. Tier 1 and Tier 2 also include one verification report for a consolidated fix submission within 30 calendar days, covering original findings and related checks up to four reviewer hours. Implementing fixes is not included.
For Tier 1 and Tier 2, assessment is normally delivered within five business days after source and required information are available. The report is due within seven business days after final scope acceptance, complete access, any accepted balance payment and the confirmed start date. Fix verification is due within five business days of a complete submission. Missing access, scope changes or pauses can extend these dates. Automated checks and re-reviews have their delivery date confirmed separately.
Yes. Nonpublic code and findings are protected and used for the engagement. External AI processing needs your separate express approval. Working source, secrets and evidence are normally deleted within 30 days after delivery or termination. Final deliverables and required records may be retained for six years, subject to the agreement's backup and legal-hold exceptions.
Tier 1 and Tier 2 take 50% of the listed price upfront, credited toward the review. After assessment we confirm scope and the remaining balance, or quote a substantiated scope correction before extra work or charges. Larger reviewed apps require an accepted quote before any payment. Before assessment, cancellation receives a full refund. After documented assessment and before substantive review, the retained fee is $150 for small apps or $300 for standard apps; the rest is refunded.
Known readiness problems are addressed before charging. If a documented Tier 1 or Tier 2 assessment later finds insufficient access or readiness, the applicable fixed assessment fee is retained and the rest is refunded. Missing information first gets a written checklist with ten business days to respond, then a final warning with five more. Certari-caused delays do not justify retention. If Certari cannot run an automated check or re-review, that payment is fully refunded.
An eligible paid automated check is credited once toward a Tier 1 or Tier 2 review of the same app bought within 30 days, after we verify the prior purchase. A re-review covers changes since a prior review of the same app within 90 days. It costs $299 for small apps or $499 for standard apps, paid in full; larger apps need a quote. A renewed badge is conditional on eligibility.
An eligible Tier 1 or Tier 2 badge links to the review's version, scope, date, limitations and status. It is time limited and conditional on the actual findings. It does not guarantee security, compliance or protection from every attack. Automated checks do not earn a badge. External AI processing needs separate approval, and reviewed tiers require accountable reviewer signoff.
Start your app intake