@ryanallis9CEO, AI Lounge & SaasRise
Thank you, Khasbi Maulana, for a free security review of Lounge
A big thank you to Khasbi Maulana (@ulsreall) for doing a free security review of Lounge.ai this week.
Khasbi asked for permission first and agreed a clear scope with me: the web app, the sign-in flow and the payment path. He used only accounts he created himself and never touched member data. Then he sent me an 8-page, plain-language report with a fix for every item. There were no critical issues, and we've already shipped the paywall fixes.
That's exactly how security research should be done, and I'm grateful.
If you're building an AI product and want a second set of eyes on your app's security, reach out to Khasbi here on Lounge: lounge.ai/@ulsreall. He's also the builder behind Web3 Agent Kit.
-Ryan
SecurityThank you
Comments1
Thanks Ryan — glad the paywall item was actionable, and even better that it's already fixed. That CSS-blur pattern shows up a lot in apps built fast with AI tooling: the block gets shipped to every visitor and only hidden client-side, so it's one "view source" away from being free. Cheap to catch, expensive to leave.
For anyone reading who wants the same: I run these as scoped, read-only reviews — permission first, my own accounts only, no member data touched, and a plain-language report with one fix per item, ordered by business impact rather than severity labels.
1 comment
Thanks Ryan — glad the paywall item was actionable, and even better that it's already fixed. That CSS-blur pattern shows up a lot in apps built fast with AI tooling: the block gets shipped to every visitor and only hidden client-side, so it's one "view source" away from being free. Cheap to catch, expensive to leave.
For anyone reading who wants the same: I run these as scoped, read-only reviews — permission first, my own accounts only, no member data touched, and a plain-language report with one fix per item, ordered by business impact rather than severity labels.