Security Review for Parenting App (Pre-Launch Audit)

• Review of authentication and session handling • Authorization/access control testing across caregiver roles (making sure one caregiver can’t access another family’s data) • API endpoint testing for data exposure • Review of how child/personal data is stored and transmitted (encryption at rest/in transit) • Basic vulnerability assessment (OWASP Top 10 relevant to a Supabase/React stack) • A written report with findings, severity ratings, and remediation recommendations Ideal candidate has experience with penetration testing on Supabase or similar BaaS-backed apps, understands data privacy requirements for apps handling children’s data, and can deliver a clear, actionable report — not just a scan output.