I will fix your supabase rls security warnings and secure your lovable app
About this Gig
The leaks that matter in a database are quiet ones: a view that skips your row-level security, a USING (true) policy left in for a dashboard, a SECURITY DEFINER function anyone can call, authorization read from user_metadata that the user can edit. Every finding we hand you comes with the query that shows it.
We audit your PostgreSQL or Supabase database from the live catalog, not from the code that claims to configure it, and hand you every finding with the query that proves it and the statement that fixes it. Read-only, inside a transaction that rolls back. Then, if you want speed too, your slowest queries with their real plans and the index or rewrite each one needs.
I check every finding and sign the report before it reaches you.
Nexidy's own database runs row-level security on 30+ tables under 50 policies, with every SECURITY DEFINER function pinned to a fixed search_path, checked by the same audit.
Message me your PostgreSQL version and where it runs before ordering. I will tell you which package fits, or quote a scope priced to what your setup actually needs.
Expertise:
Speed Optimization
•
Query Optimization
•
Indexing
•
Locks
Platform:
PostgreSQL
FAQ
Do you work with Supabase?
Yes. The audit knows the anon and authenticated roles and auth.uid().
Do you need production data?
No. The security audit reads the catalog; the performance package needs pg_stat_statements, not your rows.
Do you change anything in my database?
Not in the audit packages: they are read-only, inside a transaction that rolls back. Fixes come only in Audit + fixes, as migrations you approve, on staging first.

