Jakub SmolíkApp development and security
App security
Reviewing and securing apps
Apps are built faster than ever – in-house, by different suppliers or with AI. I check whether yours is secure, explain clearly what I found and fix the problems.
Free introductory consultation · 60–90 minutes, no obligation
According to Veracode's 2026 research, on average only 56% of AI-written code passed a security test. Source: SD Times on the Veracode report
Who I help
- Businesses and startups before launching an app or website
- People who built their app themselves or with AI tools
- Companies adding AI features and agents to their products
- Suppliers whose customers ask them to demonstrate security – for example because of NIS2 or the CRA
What I offer
App and backend review
I go through the code of your mobile app, website and server and their setup: sign-in and credential storage, permissions, APIs, logs, databases and cloud services. You get a clear report and fixes in the code.
Apps built with AI
I review apps from tools such as Lovable, Bolt or Cursor: data access rules, exposed keys and unprotected APIs – the most common weaknesses of quickly built apps.
Secure AI features and agents
I design or review the AI features in your app: model keys on the server, cost limits, agent permissions and resistance to abuse through prompt injection.
Secure development and deployment
I set up automated checks that watch every change for leaked keys and vulnerable libraries, and prepare a list of the components you use (SBOM).
Communication with servers and devices
I secure the connection between the app, the server and devices – including smart buildings and their control systems.
Material for customers and regulation
I prepare the technical part of supplier security questionnaires and of preparing for NIS2 or the CRA.
How a review works
1
We agree the scope
In the free introductory consultation we discuss what to review and confirm the scope in writing.
2
Analysis
I go through the code and setup with specialised tools and with AI – with your consent, and sensitive parts only locally on my own secured computer.
3
Manual verification
I verify and document every finding myself. Nothing goes into the report that I haven't confirmed.
4
A clear report
You get the findings ordered by severity, explained without unnecessary jargon.
5
Fixes
If you like, I fix the problems straight away – finished code changes, not just a list of issues.
Why me
I build apps myself
I know where their weak spots tend to be and can fix them directly.
Experience in a regulated environment
For more than five years I developed apps for banks and the public sector – including biometric signing and secure document handling.
Security in practice
On the projects I lead, I secure servers and the communication of apps with the backend and with devices in smart buildings.
Your data stays with me
I process sensitive code and data only with local models and never send them to cloud AI tools.
What I don't do
I don't do certified penetration tests, formal audits under cybersecurity law or ISO, or legal advice. If you need one of those, I'm happy to advise you how to proceed.
Security FAQ
How secure is your app?
Write me a few sentences about your app or website. I'll get back to you and we'll arrange a free introductory consultation.
Jakub SmolíkI reply personally.
Free introductory consultation · 60–90 minutes, no finished brief needed
Or write directly to[email protected]