> They've probably left a lot of loop holes. They've made it "secure" based on their understanding of security. -> Appreciate it. The feedback be given in a muc

> They've probably left a lot of loop holes. They've made it "secure" based on their understanding of security. -> Appreciate it. The feedback be given in a much more positive way by acknowledging their existing work and then giving them few pointers of making the app more secure. If you were taken aback then you're just being cocky. You're injecting my comment into a manufactured scenario. I'm not performing a code review, vulnerability assessment or pen test nor am I the OP's supervisor. I'm sharing my reaction to a web product as a potential consumer. An invalid claim of security causes me to lose trust in the product and its creators. It's as simple as that.