I will audit and fix your supabase security, rls policies and database

Is your Supabase data actually safe? Many apps let any signed-in user read or change other people's data without knowing it.

I'm a UK software engineer who builds production apps on Supabase and Postgres. I check every table and function the way an attacker would.

What I check:

• Row level security (RLS) on every table
• - Policies that let users see or edit other people's rows
• - Server functions that trust ids sent from the app
• - Public keys and storage buckets
• - Missing rate limits and double-claim bugs

What you get:

• A plain-English report: what's wrong, how bad it is, and how to fix it
• - The fixes, written as migrations you can review

I never need your password. Invite me to your Supabase project and remove me when we're done.