Sam's List
VoiceDrop
AppSheet Training
At a glance
- Security
- Bubble / Supabase, OWASP-aligned
- Performance
- Data, queries, frontend bottlenecks
- Output
- Ranked findings with repro steps + fixes
Engagement
What it does
A 1-2 week audit that tells you what's broken and how to fix it. Two tracks: security (auth flows, data exposure, API vulnerabilities, access control - OWASP Top 10 aligned) and performance (database queries, data loading, frontend bottlenecks, infra). Specialized in Bubble and Supabase, where the abstraction layers hide the vulnerabilities scanners miss. Every finding is verified, ranked by severity, and shipped with repro steps and a recommended fix.
What we built
We run the audit end-to-end. We read the code, test auth, data and APIs by hand, and deliver a ranked report within 1-2 weeks. Each item is a real issue we verified, ranked by severity and exploitability. We understand how Bubble and Supabase work under the hood, which is the difference between a scanner report and finding the vulnerabilities that would actually get exploited.
Where it is today
Over 100 applications audited across security and performance tracks. Clients range from early-stage startups preparing for their first enterprise customer to established platforms handling sensitive data.
The people behind this project
Zeroic
Prashant Abbi Partner @ Zeroic
Sudhanshu Sharma Senior engineer @ Zeroic
Ankur Khandelwal Senior engineer @ Zeroic