Browse categories
English
$
USD
Connect to your AI
I will find and fix security holes in your lovable or supabase app
Sameed A
About this gig
Built your app with Lovable, Bolt, Base44, Replit or Cursor, and real people are signing up? Check who else can get in before more of them do.
AI builders get you to launch fast, but they often leave the same gaps: database tables anyone can read, secret keys in the browser code, and admin pages that are hidden but not locked.
I check:
- Row level security on every Supabase table, tested as a logged-out visitor and as a normal user
- - Secret keys in your frontend (Stripe, OpenAI, service keys)
- - Storage buckets and file uploads
- - Sign up, password reset and admin access
- - Payment webhooks and edge functions
You get a plain English report ranked by risk, with the exact fix for each issue. In the higher packages I make the fixes and retest.
I'm a product manager at a US AI app builder, so I see these codebases every day. I test with test accounts and never change live data without asking you first.
Send me your app link and I'll tell you within a day whether any secret keys are visible in your public code.
Get to know Sameed A
Sameed A
AI App Developer: Lovable to App Store, RevenueCat, Supabase
- FromPakistan
- Member sinceDec 2019
- Last delivery5 years
Languages
English
I turn apps built with Lovable, Bolt, Base44 and Replit into real products: live in the App Store and Google Play, taking payments, and safe to put customers on.
By day I'm a product manager at a US AI app builder, so I see these codebases every day and know where they break. I also ship my own apps, including an Android app with RevenueCat subscriptions, live on Google Play.
Fixed scope, short updates, and nothing goes live without your OK.
My Portfolio
Other Vibe Coding Services I Offer
FAQ
Will you change anything in my live app?
Not without asking. The scan uses a test account and only reads. Fixes go on a separate branch or a copy of your database first, and you approve them before they touch your live app.
What do you need from me?
Your app link and read access to the code (GitHub or a Lovable invite). For fixes, access to your Supabase project. A test login helps too, so I can check what a normal user can see.
My app uses Firebase, not Supabase. Can you still help?
Yes. The checks are the same idea: database rules, exposed keys, storage and admin access. If anything in your setup is outside what I cover, I'll tell you before you order.
