Ver categorias
Explorar
Fiverr Pro
Português
$
USD
I will do a supabase security audit and fix rls in your lovable app
Seraphina
Level 1
Sobre este Serviço
Built your app with Lovable, Bolt or Base44 on Supabase? Before real users sign up, make sure strangers cannot read your database.
AI builders often ship tables with row level security switched off, or with policies that let any logged in user see every row. In 2025 one such flaw exposed 170+ Lovable apps. Supabase's advisor flags missing RLS, but it cannot tell if your policies match who should see what.
What I check:
- RLS on every table, for anonymous and logged in users
- Policies that leak other users' rows
- Service role key or secrets exposed in your frontend
- Storage buckets, edge functions and Stripe webhooks
- Admin checks done only in the browser
What you get:
- A plain English report ranked by severity
- Exact SQL fixes, applied by me on Standard and Premium
- A retest proving each hole is closed
I start with read only access or a staging branch, so your live app is never at risk.
Message me your app link and stack before ordering and I will confirm the right package.
Conheça mais sobre Seraphina
Seraphina
WordPress, Shopify and Ecommerce Developer
Level 1
- A partir deReino Unido
- Membro desdemai. de 2026
- Responde em aprox.:1 hora
- Última entrega5 dias
Idiomas
Inglês, Francês
I am a UK based web developer who builds and fixes websites for small businesses and online stores. I work mainly with WordPress, WooCommerce, Shopify and CS Cart, and I care about pages that load fast, look clean on mobile and make it easy for customers to buy or get in touch. I communicate in writing, so every plan, update and handover is clear and saved in our Fiverr messages. Send me your link and what you want to achieve, and I will tell you honestly what I would do.
Perguntas frequentes
Is my app really at risk if it seems to work fine?
Often yes. An app can work perfectly while any visitor can still read or edit data through your public API key. The only way to know is to test every table and policy the way an attacker would.
Do you need my passwords or full admin access?
I start with read access to your Supabase project and your live URL. For fixes, I work on a staging branch where possible, and I never need your Lovable or Bolt account password.
Can't I just ask Lovable's AI to fix security?
You can, but AI builders frequently generate policies that look correct and still leak data. I verify each fix by actually testing access as different users, not by reading the code alone.
What platforms do you cover?
Any app with a Supabase backend: Lovable, Bolt, Base44, Replit, v0, Cursor or hand written. Firebase apps are also possible, message me first.
Will fixing security break my app?
It can if done carelessly, which is why I test every user flow after each change and apply fixes on staging first. Anything that would change how your app behaves is flagged for your approval.
Is this a formal penetration test or compliance certificate?
No. It is a practical configuration audit focused on the mistakes that actually leak data in AI built apps. If you need a formal certification, I will tell you honestly.
