Browse categories
Explore
Fiverr Pro
English
$
USD
I will audit and fix website security vulnerabilities and supabase rls
Ghulam Mujtaba
About this gig
Is your web app secure, or is sensitive data exposed to anyone with a browser?
Over 76% of web apps harbor flaws. AI vibe coding (Lovable, Bolt, Cursor) has caused widespread broken access controls, leaked keys, and missing Row-Level Security (RLS).
As a Google-certified Cybersecurity Professional and full-stack engineer, I don't just hand you an automated PDF. I audit the vulnerabilities, write direct code fixes, and verify your app is safe for production.
What I Audit & Fix:
Supabase Security: Missing RLS, open "USING (true)" policies, and tenant leaks (IDOR).
Leaked Secrets: Removing exposed service_role keys, OpenAI, and Stripe credentials from client code.
OWASP Top 10: Fixing Broken Access Control, SQL Injection, XSS, and session flaws.
Auth & Routes: Hardening Next.js middleware, JWT auth, and protected API routes.
Security Headers: Configuring CSP, CORS, and request validation.
Why Choose Me?
Google Cybersecurity Professional Certificate holder.
Full-stack developer (Next.js, FastAPI, PostgreSQL, Supabase).
Real code fixes and technical verification report included.
Message me now with your app details for a quick assessment!
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Ghulam Mujtaba
Ghulam Mujtaba
Full Stack and AI Engineer
- FromPakistan
- Member sinceOct 2026
- Avg. response time1 hour
Languages
English
I fix and launch AI-built apps and SaaS products. If Lovable, Bolt, Replit, Cursor or v0 left you with broken login, Supabase/RLS errors, failing APIs or deployment issues, I diagnose and repair the root cause. My stack includes Next.js, React, TypeScript, Supabase/PostgreSQL and Python FastAPI. I have shipped a commercial clinic system, built the CampusAxis university platform, and developed MegiLance with AI-enabled workflows. Expect scoped fixes, clear communication and maintainable code.
My Portfolio
FAQ
What makes your service different from automated scanners?
Cheap gigs run free scanners and hand you confusing PDFs. As a Google-certified cybersecurity specialist, I write the code, configure Supabase Row Level Security (RLS) policies, fix middleware, and verify the patch.
Can you secure AI apps built with Lovable, Bolt, or Cursor?
Yes! AI tools prioritize rapid UI creation over security, frequently disabling Row-Level Security (RLS) or exposing service_role keys. I specialize in auditing vibe-coded Next.js and Supabase apps to bring them up to production-grade security standards.
What is Supabase Row Level Security (RLS) and why is it critical?
Because Supabase exposes your database via public REST APIs, missing RLS lets anyone with your anon key query or wipe tables. I audit tables and write airtight SQL policies ensuring users can only read and edit their own authorized records (auth.uid() = user_id).
Do you perform destructive attacks or could my site go down?
No. All audits and assessments are strictly non-destructive. If testing authenticated workflows or database queries, I conduct them in a staging environment or with isolated test accounts to ensure zero downtime or data corruption for your live users.
What information do you need to start the security audit?
I need your website URL, confirmation of site ownership, an overview of your tech stack (e.g. Next.js, Supabase, Python), and repository or dashboard access (or staging environment) to inspect and patch vulnerabilities.
