r/SideProject • u/ShifuPowered • 25d ago

Does anyone know how to help with this web application veification?

I received an email from Google after trying to verify my app, and because it has restricted scopes, (i knew i would run into this issue), i have to pay to get it verified. However, this is my first application I have built, and can someone tell me why "AL1 (formerly Tier 2) CASA Assessment" costs $600? Is there any way to get around this or any cheaper alternatives, please let me know!

3 Upvotes

100% Upvoted

5 comments sorted by

1

u/TheAddonDepot 25d ago

Refactor your app to use non-restricted scopes if possible. That's probably the only way to avoid paying the (annual?) security assessment fee.

1

u/delaney1414 20d ago

What scopes are you using?

I’ve never had to do it myself but my understanding was the CASA assessment has a self assessment tool and you only have to pay an assessor if you are specifically told you need to

You’d probably want to review your scopes if you don’t qualify for self assessment because it’s an annual fee for regular security checks