Independent Python Security Code Review for a Small Prototype

We’re looking for an experienced Python security reviewer to independently assess a private prototype before controlled human testing.

The application processes structured files/JSON and produces HTML output. The current application contains approximately 3,400 lines across 10 Python files, plus around 350 lines of supporting Python code. Tests and additional assurance tooling will be included in the detailed scope pack.

Existing automated tests and AI-assisted reviews are available. We need an independent manual assessment of the code and evidence, including anything those checks may have missed.

Scope:
- Input validation, malformed data and file/path handling
- Unsafe execution, injection risks and HTML output handling
- Sensitive-data handling, logging and relevant dependencies
- Security-relevant failure paths and gaps in existing tests
- Relevant supporting scripts and assurance tooling
Deliverables:
- A written report tied to the exact code version reviewed
- Findings with severity, affected files/lines, supporting evidence and practical fixes
- Clear identification of what was reviewed, what could not be verified and any exclusions
- One clarification round and a clearly bounded recheck of agreed fixes
Please include in your proposal:
1. Your relevant Python security-review experience, ideally three years or more, with specific examples.
2. A redacted sample report or equivalent evidence of your own review work.
3. Who will personally perform the review and whether you use subcontractors or external AI services.
4. Your fixed-price quote, scope limits and availability. Ideally we’d like delivery within 2–3 days of agreeing the scope and receiving the materials; please confirm what is realistic.
The review starts read-only. Any test execution or changes must be agreed separately. Confidential materials will be shared privately with the selected reviewer under agreed confidentiality and access arrangements.

We are also seeking a GitLab security review. If you have demonstrable experience in both areas, please provide separate prices and an optional combined fixed-price quote, with evidence of your GitLab review experience.