Paste your app's URL. I'll email you what I can see from the outside, within one business day.
What you get: the security risks visible from your live app — exposed keys, missing headers, open paths, a look at your login page — each with how bad it is and what to do about it.
When: within one business day, by email. A real person looks at it; this isn't an instant robot report.
What it isn't: the outside view can't see your database rules, your access checks or your billing logic. That's the $349 Sweep — and I'll say so plainly if that's what you need.