Browse categories
Explore
Fiverr Pro
English
$
USD
I will audit and fix supabase security in your lovable or bolt app
Jude Hilgendorf
About this gig
Apps made with Lovable, Bolt or Cursor often work well during demos but can start leaking data once real users show up. Most of the time, the issue is with Supabase: a table with row-level security not enabled, a storage bucket anyone can access, or a secret key that found its way into the browser.
I look for issues manually. I run two live apps on Supabase and Stripe myself (SecPlus Mastery and Keystair). I also have the CompTIA Security+ certification.
What I check:
- Row level security on every table, and if each policy fits who should view the data
- Storage buckets and who has access to the files in them
- API keys in the front end and in the repo
- Auth settings like email verification, redirect URLs and password rules
- Stripe checkout and webhooks, in the Launch ready package
You get a report in plain English. Each finding tells you what's wrong and how severe it is, with the exact fix (SQL, a setting or a change to your code). On Standard and Premium packages, I handle the fixes and retest them. I work from a collaborator invite and never ask for your passwords. Not sure which package fits? Message me first.
Get to know Jude Hilgendorf
Jude Hilgendorf
Chrome extensions and launch fixes for apps built with AI
- FromUnited States
- Member sinceJul 2020
Languages
English, Spanish
I make Chrome and Firefox extensions. I also run SecPlus Mastery, a paid Security+ study site built on React, Supabase, Stripe and Netlify.
Running that site is why I can take an app built with Lovable, Bolt or Cursor and get it ready for real users. I go through the database rules, the sign-in, Stripe and the deploy. I'm Security+ certified, so I look for data leaks first. You get a plain write-up of what was wrong and a list of everything I changed.
My Portfolio
FAQ
What do you need from me to start?
The app link, access to the code (a GitHub collaborator invite or a zip file) and an invitation to your Supabase organization. I never need your passwords.
Does the Security check change anything in my app?
No. The check is read-only. You get the report and can apply the fixes yourself, or upgrade to Check and fix.
Is this a penetration test?
No. It is a review of your Supabase configuration, keys and code for the common holes in apps like yours. If you handle medical records or card data, you still need a full penetration test.
My app uses Firebase. Can you help?
The checks are designed around Supabase. Message me first and I will tell you honestly whether I can help.
