I will audit and fix supabase rls security in your lovable or bolt app


About this gig
Apps built with Lovable, Bolt, v0 and Cursor often ship with database tables any visitor can read, API keys in the frontend, and public storage buckets.
This audit checks every table, RLS policy, storage bucket, database function and exposed key. Then it closes the gaps and re-tests to prove each one is closed.
Also covers Supabases October 30 change: new tables on existing projects stop working through the Data API without explicit grants. Fixed in the same pass.
Included (Standard and Premium):
- Severity-ranked report in plain English
- Fixes applied directly in your Supabase project
- Re-test showing each issue closed
- External attack-surface scan of your domain
Basic is the report only.
Access: invite me as a Developer in your Supabase organization. No passwords shared. Rotate your keys after delivery.
If something in scope is missed, it gets fixed free.
Get to know Georgy D
App and Database Security Engineer, Network Security Architect
- FromUnited States
- Member sinceOct 2026
Languages
English, Russian

