Browse categories
Explore
Fiverr Pro
English
$
USD
I will find and fix security holes in your lovable or supabase app
Apolonus
About this gig
Built your app with Lovable, Bolt, Cursor or Replit? It works. But is your customers' data actually safe?
AI app builders move fast and often skip security. One of the most common problems in these apps: database tables that anyone on the internet can read, with every user's emails and data, using the public key that is already in your website code.
I find those holes and close them before someone else finds them.
WHAT I CHECK
- Supabase Row Level Security on every table
- Secret keys exposed in your frontend or repo
- Admin pages that are hidden but not protected
- Functions and APIs with no login check
- Public file storage, payment webhooks, risky HTML
WHAT YOU GET
- A plain English report: what's wrong, how bad it is, how to fix it
- On Scan and Fix: the fixes made in your code and database, then a retest
- Before and after results, so you can see it's fixed
WHY ME
My background is cybersecurity. I only test apps you own, keep your data private, and never need your passwords.
Send me your app link and I'll tell you what to check first.
Get to know Apolonus
Apolonus
AI Automation and Full Stack Dev, From Stream Setup to SaaS
- FromUnited States
- Member sinceJul 2017
- Avg. response time1 hour
Languages
English, Russian, Turkish
I'm the founder of an AI content company with a cybersecurity background, and I build things that actually run. From a quick OBS/stream setup or a broken script fix to AI agents, n8n/Make automations, chatbots, custom MCP servers and full SaaS MVPs, I handle small tasks and complex IT projects alike. Stack: Python, JS/TypeScript, Claude, OpenAI, local LLMs, Supabase, Stripe. Every delivery is security-checked. I speak English, Russian and Turkish. Message me before ordering and I'll scope your project fast.
My Portfolio
FAQ
What do you need from me?
Your app link and your code (a GitHub invite or a zip export). For fixes, invite me as a collaborator on your Supabase project. Never send me passwords.
Will the fixes break my app?
I fix on a separate branch, test that everything still works, and you approve before anything goes live.
Is this a full penetration test?
No. It's a focused security review for apps built with AI tools. It catches the most common and most dangerous holes. For a compliance grade pentest you need a certified firm.
Which apps do you support?
Apps from Lovable, Bolt, Cursor, Replit, v0 and similar tools on a Supabase backend. Firebase on request, message me first.
Can you test an app I don't own?
No. Only apps you own or have written permission to test.
What if you find nothing?
You get a report showing everything that was checked and passed, so you know exactly where you stand before launch.
