Browse categories
English
$
USD
Connect to your AI
I will fix supabase rls security holes in your lovable app and prove it
Victor Rojas
About this gig
Scanner says it's fixed? I test with 2 test accounts if your data still leaks, and prove it.
Built your app with Lovable, Bolt, Replit or Claude Code on Supabase? One missing security rule can let any visitor read, change or delete your users' data, and it's easy to miss before launch.
What I check:
- Can someone with only your public key read your tables?
- Can a signed-in user see or change another user's data?
- Are files in storage or secret keys exposed?
How it works:
1. You invite me to your Supabase project (Developer role) and repo. No passwords in chat.
2. I run leak tests and explain in plain English what leaks and why.
3. Standard and Premium: I fix the rules on a test copy first when possible, then on your live app with your OK.
4. You get proof: the leak test results, and with a fix, the same tests failing before and passing after.
See the demo in my gallery: 5 of 5 leak checks failed before the fix, 0 after (demo app, fictional data).
I use AI tools to speed up the analysis. Every change is reviewed and tested by me before delivery. Video narration: AI voice.
Get to know Victor Rojas
Victor Rojas
FullStack Developer, Supabase security and fixes for AI built apps
- FromBrazil
- Member sinceOct 2026
Languages
English, Portuguese
Developer from Brazil (UTC−3). I help founders who built their app with AI tools (Lovable, Bolt, Replit, Claude Code) make it safe and working: Supabase data security, bug fixes and deploys. I explain the problem in plain English before changing anything and show proof before it goes live. I use AI tools to speed up the analysis. Every change is reviewed and tested by me before delivery.
My Portfolio
FAQ
Do I need to send you my passwords?
No. Invite me to your Supabase organization as a Developer (not Owner) and to your GitHub repo. You can remove my access after delivery.
What does the Leak check cover?
The leak your scanner flagged, or up to 3 tables, tested with 2 test accounts. You get a report with proof. No changes to your app.
Will the fix break my app?
I test your main flows on a test copy first when possible, and I tell you what will change before touching your live app.
What if you find more than my package covers?
I tell you before starting and send a custom offer. No extra work without your OK.
Is the demo in the gallery a real client?
No. It's a demo app with fictional data, built to show exactly how I test and prove a fix.
Do you use AI?
Yes. I use AI tools to speed up the analysis. Every change is reviewed and tested by me before delivery. Video narration: AI voice.
