I will audit your vibe coded app for exposed API keys and supabase rls leaks

E
ethanthompso763
E
ethanthompso763
Ethan T.

About this gig

Built your app fast with Lovable, Bolt, v0, Replit or Base44 on Supabase or Firebase? Those apps ship with the same leaks: keys in the frontend bundle, tables readable without RLS, API routes with no auth, open storage buckets and secrets in git history.


I review your app the way an attacker would and hand you a written report. Every finding is ranked critical, high, medium or low, with the exact file, setting or line to change. You also get the list of what I checked and found clean.


What I check:

- API keys and secrets in the client bundle and repo history

- Supabase RLS policies and Firebase security rules

- Auth on API routes and server functions

- Storage bucket access

- Security headers and basic code quality


I only need read access to start. Standard and Premium include the fixes, done on a branch you review.


Not sure which package fits? Message me before ordering.

Get to know Ethan T.

Ethan T.

AI Automation, App Security and Websites

  • FromUnited States
  • Member sinceOct 2026
  • Avg. response time2 hours
  • Languages

    English
I build automations and review the security of apps built quickly with AI tools. I do automation and AI agent builds (n8n, Make, Python, Claude and OpenAI APIs, Telegram and Slack bots), security reviews for AI-built apps (Lovable, Bolt, Supabase, Firebase) with a written report and fix steps, cold email systems in your own Google Workspace, and fast websites for local businesses. Everything is fixed price and scoped in writing before I start. No calls needed.

My Portfolio

Other Vibe Coding Services I Offer