Web application security · In development
A working app is not necessarily a secure app.
FL Future Tech is the public-facing name used by Florida Future Technologies LLC. The company is planning independent security reviews of web apps built with AI coding tools. The intended focus is broken permissions, unprotected API routes, and information exposed to the wrong users.
Pre-launch. Services are not available. Florida Future Technologies LLC is not accepting projects, consultations, appointments, or payments. No launch date has been announced.
Planned first service
A closer look at who can access what.
Application & API security review
The review would check whether one account can read another's records and whether protected API routes enforce permissions on the server.
Intended deliverable: an evidence-based findings report, fixes ranked by impact, and retesting steps.
Also being explored: code and release checks, and security testing for AI features. Initial focus would be web applications and APIs, not network penetration tests or compliance certification.
Illustrative security finding
Another user's invoice.
Fictional example of a finding. Not a client assessment.
- What failed
- A signed-in user changes an invoice ID in a URL and receives another account's invoice.
- Why it matters
- One customer could see another customer's billing information.
- What to change
- Enforce record ownership on the server, then verify access with two separate test accounts.