I will review your lovable or supabase app security before launch

B
btcbroker
B
btcbroker
Jonny L.

About this gig

Built your app with Lovable, Bolt, Cursor or Supabase and about to launch? AI builders ship fast, but they often leave the boring parts unchecked: database access rules, keys sitting in browser code, and auth settings left on defaults. I review those parts before real users arrive and explain what I find in plain English.


WHAT I CHECK: database access rules on each table · keys and secrets in front-end code · auth settings (sign-up, email confirmation, password rules) · common configuration mistakes for your stack · code review on Standard and Premium.


WHAT YOU GET: a report ranked by severity, a clear fix for each issue, and a paste-ready prompt so your AI builder can make the change.


HOW I WORK: only projects you own, with your written permission · read-only access, I never change your live app · your materials are deleted after delivery.


ABOUT ME: I run JonnyLab, a small software studio, have formal cybersecurity training and ship my own apps on Next.js and Supabase.


This is a configuration and code review, not a penetration test, and no review can guarantee an app is free of every issue. Not sure it fits your stack? Message me before ordering.

Get to know Jonny L.

Jonny L.

Security reviews for Lovable and Supabase apps

  • FromSouth Korea
  • Member sinceDec 2019
  • Languages

    English, Korean, Japanese
I'm Jonny, an independent software builder running JonnyLab, a small studio in South Korea. I have formal cybersecurity training (Linux, networking, web, logs) and ship my own apps with Next.js, Supabase and AI coding tools. I review apps built with Lovable, Bolt, Cursor and Supabase before launch: database access rules, exposed keys, auth settings and common config mistakes. You get a plain-English report with prioritized fixes and prompts you can paste into your AI builder. I only review projects you own, with your written permission and read-only access.