For founders who build with AI, whichever tool writes the code, and would rather not learn security the hard way. Real incidents, the research behind them, and what to check this week.
3 articles tagged #supabase
Clear filtersIf your app runs on Supabase, one setting decides whether a stranger can download your whole user table. Here's what it does, in plain English, and how to check it without reading a line of SQL.
An AI-agent social network went viral, and within days researchers could read and edit its entire database with a key sitting in the page source. Here's the plain-English version, and how to check your own app.
About one in ten apps showcased on Lovable let strangers read, and sometimes change, their database. The cause was the same in almost every case, and it's one you can check for yourself this afternoon.
The free pre-launch checklist has the twenty checks we would run first, in the order we would run them. No email, no account.