Browse categories
Explore
Fiverr Pro
English
$
USD
I will review your lovable and supabase app security with rowproof
About this Gig
Can one user read or change another user's data? RowProof provides a focused, written pre-launch security review for Lovable and Supabase apps.
BASIC: review one sanitized RowProof SQL audit output; report up to 5 findings with evidence, severity, impact, fix guidance and limitations. Catalog observations are distinguished from heuristic warnings and risks requiring live tests. No live testing.
STANDARD: one app, up to 5 tables; review relevant RLS policies and authorization code, plus two-account tests in an authorized staging environment.
PREMIUM: Standard plus up to 3 AI endpoints and one Stripe test-mode billing flow, including webhook verification, retries and access changes where testable.
Every package includes a written report and one clarification revision. Async only: no calls. Fix implementation, full penetration testing, infrastructure and load testing are excluded. No guarantee of finding every vulnerability.
Share sanitized files only: no passwords, secret keys or production customer data. Contact me here before Standard or Premium to confirm scope and safe test access. All communication and payment stay on Fiverr.
Testing application:
Web application
Device:
PC
FAQ
Is Basic a complete security audit?
No. Basic reviews one sanitized SQL output and reports up to 5 findings. It separates catalog evidence from heuristic warnings and items requiring live tests. It does not test authentication, Stripe, function code or cross-user access.
Do you need passwords, secret keys or production data?
No. Never send credentials, tokens, secret keys or real customer data. Basic needs sanitized script output. Higher packages use sanitized code and an agreed staging setup with synthetic data and authorized test access.
What is included in Standard and Premium?
Standard covers one app and up to 5 tables, relevant authorization code and two-account staging tests. Premium adds up to 3 AI endpoints and one Stripe test-mode billing flow. Confirm scope on Fiverr before ordering.
Are calls or fixes included?
No calls: the service is asynchronous and written. You receive findings, evidence, severity, impact and remediation guidance. Implementation is excluded. One revision covers corrections or clarification of the report, not new features or an expanded review.
Does a clean report guarantee my app is secure?
No. This is a scoped review, not a full penetration test or certification. The report states what was checked, what was confirmed and what remains untested. No review can guarantee that every vulnerability has been found.
