l
leonardodev17

Leonardo

@leonardodev17

I audit AI built apps before real users get in

Brazil
English, Portuguese, Spanish
About me
I find the security holes AI builders leave behind, before your first real customer does. Apps built with Lovable, Bolt or Cursor ship fast and look finished. Underneath it's usually the same story: row level security switched off, so any logged in user reads everyone's data. Admin roles anyone can claim. Keys sitting in the browser bundle. Payment webhooks nobody checks. I read your code and tell you what's exposed, what someone could do with it, and how to fix it. Plain language, with a copy paste prompt for each fix. Price is fixed and agreed before I start.... Read more

Skills

l
leonardodev17
Leonardo
Offline • 

See my services

Troubleshooting & Improvements
I will audit your lovable or supabase app for security flaws
From$95 / projectMore details

Work experience

Self_Employed

Backend Developer

Self Employed • Self-employed

Aug 2024 - Present • 2 yrs 1 mo

Design and run a multi-user platform in production: Java services, a TypeScript stack with Next.js and NestJS, PostgreSQL and Redis. Responsible for authentication and session handling, per-user data isolation, database schema and migrations, background job queues, backups and incident recovery. Everything from schema to deploy, on my own. Years of watching what actually breaks in production, which is what I look for when I audit someone else's code.