Browse categories
English
$
USD
Connect to your AI
I will find and fix security holes in your lovable or supabase app
Waqas M
About this gig
AI tools build apps fast, but they often ship them with open databases. Missing Row Level Security, exposed service keys and weak auth rules can let anyone read or change your users' data.
What I check:
- Supabase RLS policies on every table
- Service role or API keys exposed in the frontend
- Auth flows: signup, login, password reset, roles
- Storage buckets that are public by mistake
- Edge functions and API routes without checks
- Secrets in your repo or environment
What you get:
- A clear report: each issue, its risk and how to fix it
- Fixes applied (Standard and Premium)
- A re-test to confirm the holes are closed (Premium)
Why me:
- 7+ years full stack development with SQL databases
- DevOps and cloud experience
- Plain English reports, not jargon
I only test apps you own or are authorized to test.
Get to know Waqas M
Waqas M
Full Stack Web Developer and DevOps Engineer
- FromPakistan
- Member sinceMar 2026
Languages
English
Full stack developer with 7+ years of experience in PHP, Laravel, JavaScript, React, MySQL and AWS. Since 2021 I have been a team lead at Somatic Health, a US online physical therapy platform, where I build the web and API side and cut the AWS bill by more than 90%. On Fiverr I fix PHP and Laravel bugs, fix and deploy apps built with Lovable, Bolt, Cursor or Replit, find and fix security holes in Supabase apps, and reduce AWS bills. Clear communication, fast replies, and I keep working until it is fixed.
My Portfolio
FAQ
Will you change my data?
No. I review policies and code, and test with test accounts.
Do you need my Supabase password?
No. A project invite with limited access is enough.
