About Trustfield

Last updated: 2026

Trustfield checks AI-built and hand-written web apps for the security mistakes that ship fastest: keys left in the browser bundle, database rules that let one customer read another's data, payment webhooks nobody verified, and chatbots that can be talked into leaking their instructions.

Why it exists

AI builders made it possible to ship a full app in a weekend. They did not make security automatic. The result is predictable: apps with real users put live API keys in client-side code, leave database tables open, or accept any webhook that looks like a payment. A pentest costs more than most early apps earn in a month. Trustfield exists to make the first honest check cheap, clear and repeatable.

Who runs it

Trustfield is a sole proprietorship of Dhruv Kumar, based in Faridabad, Haryana, India. It is built and operated by the same person who answers the email: no outsourced support queue, no reseller in the middle.

• Business and support enquiries: info@trustfield.dev
• Security reports: info@trustfield.dev

What we will not claim

We do not claim to make an app unhackable. We are not a penetration test, not a certification, and not affiliated with Lovable, Bolt, v0, Cursor, Replit or OpenAI. We report what an external scan can see at a point in time, and we list what we could not check.

Operating principles

• Evidence first. A finding without a file, header or URL behind it does not belong in the report.
• Refund the wrong finding. If we get something factually wrong and you show us why, that report is refunded. Criteria and process: refunds.
• No dark patterns. No fake countdowns, no fake testimonials, no hidden renewal.
• Say what we do not check. Every report ships with that section.

Contact and expectations

Email is answered by the founder, usually within one business day. We do not promise a 24/7 hotline. For billing, delivery problems or data deletion, write to info@trustfield.dev with the report link or payment id.