Guides

Security for AI-built apps, in plain English

Short, practical guides on the mistakes that leak data in apps built with Lovable, Bolt, Replit and v0 — and how to fix them.

Guide · Supabase

Exposed Supabase keys: what anon vs service_role really means

One Supabase key is meant to be public; the other hands your whole database to a stranger. How to tell which one your app is leaking, and how to fix it.

Security basics · 6 min read