Knowledge base
Practical articles on securing apps built with Lovable, Cursor or Bolt: permissions, keys, going live and everything that goes wrong there.
Start with securing Supabase or explore the guide to AI code security.
RLS is the most important switch in your Supabase project. Here is what it does, how to set it properly and which policies you usually need.
Row level security in Supabase, explained without jargonA key in your code or git history is one of the most common leaks. Here is the plan, in the right order.
An API key leaked: what to do nowFrom 80% done to actually running. These are the points to tick off before you let the first real user in.
Checklist: launching your AI-built app safelyYou built something great with Lovable, Cursor or Bolt, and it works. But 'it works' says nothing about 'it is safe'. Here is how to check without any technical knowledge.
How do you know your AI-built app is safe, without being able to code?No doom scenarios, but honest: what actually happens when your customers' data ends up in the wrong hands, and how big that risk really is for a small app.
What a data breach means for a small business ownerPasswords are the most sensitive thing your app holds. Luckily you do not have to handle them yourself at all — and the alternative is easier too.
Why you should never store passwords yourself (and what to do instead)Security prevents things from going wrong. But what if they go wrong anyway? Two quiet workers — backups and uptime monitoring — make sure you stay standing.
Backups and uptime: the invisible part of a reliable appLovable, Cursor, Bolt, Replit, v0: a few sentences is all it takes to build a complete app these days. But who secures that app? The answer differs per tool — and it matters more than you think.
Vibe coding tools: what they build for you — and what you must handle yourselfEvery security professional talks about it: the OWASP top 10. It sounds like something for specialists, but it is simply a list of the ten most common mistakes in websites and apps. And you will recognise a surprising number of them.
What is the OWASP top 10 — and why should you care?Supabase is the backbone of many AI-built apps: database, login and storage in one. Convenient — but a handful of settings determine whether your data is truly safe. This is the checklist we use ourselves.
Supabase security checklist: what to verify before going live