I will do supabase security audits

R
rhitwik_8
R
rhitwik_8
Rhitwik S

About this gig

Most Supabase apps ship with at least one table where users can read or change data they shouldnt. The anon key is public by design, so your Row Level Security policies are the only thing protecting your data.


I run production Supabase security audits based on the same 5-phase process I used to harden AhmedSells.ae, a live UAE marketplace I built and run.


What I check:

RLS policies on every table: missing policies, overly broad USING/WITH CHECK clauses, and cross-tenant leaks

Security-definer functions and RPCs that bypass RLS

Storage bucket policies: public buckets, upload and overwrite permissions

Auth configuration: rate limiting, email enumeration, redirect URLs, and session handling

Next.js API routes and server actions: service-role key exposure and missing auth checks

Edge Functions, environment variables, and secrets handling


What you get: a prioritized report (critical low) with the exact SQL or code fix for each finding, and fixes delivered as a pull request on a separate branch, depending on your tier.

Respect third-party rights

Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.

Get to know Rhitwik S

Rhitwik S

FullStack Web Developer

  • FromUnited Arab Emirates
  • Member sinceOct 2026
  • Avg. response time1 hour
  • Languages

    English, Malayalam, Hindi, Arabic, Dutch
I am a full-stack web developer building production web apps with Next.js, Supabase, and Tailwind CSS. As the founder of AhmedSells.ae, I have experience building bilingual marketplaces and business sites. My engineering background allows me to bring strong requirements gathering and data skills to every project.

My Portfolio

Related tags