I will fix lovable app bugs and supabase rls security leaks before you launch


About this gig
Got an email from Supabase saying your tables are public, or a security warning in Lovable you don't know what to do with? That usually means Row Level Security is off, and anyone who opens the browser console can read your users' data. I close that first, add tests that prove user A can't see user B, then fix the bugs you hired me for.
Send me the live URL before you order and I'll tell you, free, whether your data is open to strangers. Read-only, apps you own, written answer.
What I do:
- Leak check: RLS, exposed keys, open Edge Functions, Stripe webhooks anyone can call.
- - Fix the errors you're stuck on: "new row violates row-level security policy", "permission denied for table", "Edge Function returned a non-2xx status code", rls_disabled_in_public.
- - Fix bugs, build errors and regression loops in Lovable, Bolt, Replit or Cursor apps.
- - Add what the generator skipped: validation, error handling, Stripe, email, uploads.
- - Deploy with env vars and a passing production build. Code back on GitHub, one readable commit per change.
Stack: React, Next.js, TypeScript, Supabase, Postgres, Node, Stripe. I use Claude Code and Cursor daily, so I know how these codebases go wrong.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Ali
AI engineer who makes AI built apps safe to launch
- FromPakistan
- Member sinceAug 2022
- Avg. response time2 hours
- Last delivery3 years
Languages
Urdu, English
My Portfolio
FAQ
Will you break what already works?
No. I audit first and you approve the list before I touch anything. Every change is its own commit on your GitHub, so anything can be reverted in a minute.
Do I need to give you my Supabase or Vercel login?
No. Invite me as a collaborator on GitHub, Supabase and Vercel. You keep ownership of every account and can remove my access the moment we are done.
Can you add features too, or only fix bugs?
Both. Basic is one fix. Standard adds an audit and more fixes. Premium includes hardening plus Stripe or one new feature, with two weeks of support after launch.
What do you need from me for the free leak check?
Just the live URL of an app you own. I test from the outside only, read-only, the way a stranger with a browser would, and send you a short written answer. If you want the fixes, the Leak Check package covers up to 3 of them with tests.
What if you find nothing serious?
Then you get a written report saying so, with the exact checks I ran, and I spend the rest of the package on the bugs you want fixed. If I do find leaks, I close them and add tests that prove user A cannot read user B.

